Privacy Policy

Last updated: October 2026

1. Introduction

At LUTHIQ, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, place an order, request a custom guitar, or contact us.

LUTHIQ is a commercial brand operated by José Ramiro & Alves, Lda., a company incorporated in Portugal.

For the purposes of applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), José Ramiro & Alves, Lda. acts as the data controller for the personal data processed in connection with its activities, except where another entity independently determines the purposes and means of processing.

By using our website, you acknowledge that you have had the opportunity to read this Privacy Policy.

2. Data Controller and Contact Details

The entity responsible for processing your personal data is:

José Ramiro & Alves, Lda.
Trading as LUTHIQ
Tax Identification Number (NIF): 505653800
Registered address:
R. Padre Manuel Guimarães 33
4700-284 Braga
Portugal

Email: support@luthiq.art
Website: LUTHIQ

If you have any questions about this Privacy Policy or the processing of your personal data, you may contact us using the email address above.

3. Personal Data We Collect

Depending on how you interact with our website and services, we may collect the following categories of personal data.

3.1. Identity and Contact Information

When you place an order, contact us, or request a custom product, we may collect:

Full name;
Email address;
Telephone number;
Billing address;
Shipping address;
Tax identification details where required for invoicing or requested for a legitimate purpose.

3.2. Order and Transaction Information

When you purchase a product, we may process information relating to:

Products purchased;
Guitar specifications and customisation requests;
Order number and order history;
Payment status and transaction references;
Shipping and delivery information;
Invoices and other legally required records;
Communications relating to your order, returns, repairs, or complaints.

3.3. Communications

If you contact us by email, website contact form, or social media, we may process your name, contact details, message content, attachments, and any other information you choose to provide.

Please avoid sending sensitive personal information unless it is strictly necessary.

3.4. Technical and Usage Information

When you visit our website, certain technical information may be collected automatically, depending on the website configuration and your cookie preferences. This may include:

IP address;
Browser and device information;
Website pages visited;
Date and time of access;
Referral information;
Cookie identifiers and similar technologies.

Non-essential analytics and advertising technologies will only be used where the required consent or other applicable legal basis has been obtained.

4. How We Use Your Personal Data

We process personal data for the following purposes:

Purpose	Legal basis under the GDPR
Processing orders and providing products	Performance of a contract
Handling custom guitar requests and quotations	Pre-contractual measures and, where applicable, performance of a contract
Processing payments and arranging deliveries	Performance of a contract
Issuing invoices and maintaining accounting records	Compliance with a legal obligation
Responding to customer enquiries	Pre-contractual measures, performance of a contract, or legitimate interests, depending on the enquiry
Managing returns, repairs, complaints, and legal claims	Performance of a contract, compliance with legal obligations, or legitimate interests, as applicable
Preventing fraud and protecting website security	Legitimate interests or compliance with applicable legal obligations
Improving website functionality and understanding usage	Consent where required, or another applicable legal basis
Sending promotional communications	Consent or another legally permitted basis, as applicable
Complying with legal and regulatory requirements	Compliance with a legal obligation

We will not use your personal data for purposes incompatible with those described above without providing the information and obtaining any consent required by law.

5. Custom Products and Personalisation

LUTHIQ specialises in personalised guitars and other products that may be manufactured according to customer specifications.

When you request a customised product, we may process information concerning your requested design, specifications, reference images, communications, and agreed product modifications.

We use this information to assess feasibility, prepare quotations, manufacture the product, and fulfil your order.

If you provide photographs, artwork, or other reference material, you should ensure that you have the necessary rights or permissions to provide it for the requested purpose.

We will handle customer-provided material in accordance with applicable law and our contractual obligations. We will not assume that permission to manufacture a customised product automatically grants permission to publish the customer’s identity, private communications, or other personal information.

Where we wish to use identifiable customer information or customer-specific material for promotional purposes, we will obtain any consent or other legal authorisation required.

6. Payments

Payments are processed through the payment methods and payment service providers made available at checkout.

Depending on the payment method selected, your information may be processed directly by the relevant payment provider under its own privacy policy and terms.

LUTHIQ may receive information necessary to confirm and manage your payment, such as payment status, transaction references, and limited payment-related details.

We do not intend to store complete payment card details on our own systems. Payment card information should be handled by the relevant payment service provider in accordance with its security and legal obligations.

Please consult the privacy policy of the payment provider you choose for further information about its processing activities.

7. Sharing Personal Data

We do not sell your personal data.

We may share personal data with third parties when necessary for the purposes described in this Privacy Policy, including:

Payment providers, to process transactions;
Shipping and delivery companies, to deliver your order;
Hosting and website service providers, to operate and maintain our website;
Email and communications providers, to communicate with customers;
Accounting and invoicing providers, to meet financial and tax obligations;
Analytics and website optimisation providers, where applicable and lawfully configured;
Professional advisers, where necessary for legal, accounting, or business purposes;
Public authorities and regulatory bodies, where disclosure is required by law.

These recipients may process personal data as independent controllers or as processors acting on our behalf, depending on their role.

Where a service provider processes personal data on our behalf, we will take the steps required by applicable data protection law to ensure appropriate contractual and security safeguards.

8. International Data Transfers

Some service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA to a country that does not benefit from an applicable adequacy decision, we will ensure that the transfer is supported by an appropriate safeguard under the GDPR, such as Standard Contractual Clauses, where required.

Further information about relevant safeguards may be requested using the contact details provided in this Privacy Policy.

9. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, taking into account applicable legal obligations and the need to establish, exercise, or defend legal claims.

Retention periods may vary depending on the category of data and the purpose of processing.

For example:

Order and customer records: retained for as long as necessary to manage the customer relationship and comply with applicable legal obligations;
Invoices and accounting records: retained for the period required by Portuguese tax and accounting legislation;
Customer support communications: retained for as long as necessary to resolve the enquiry and maintain relevant records;
Custom design information: retained for as long as necessary to fulfil the order, manage related issues, and meet applicable legal obligations;
Marketing data: retained until consent is withdrawn or the data is no longer necessary for the relevant lawful purpose;
Technical data and cookies: retained according to the relevant purpose, configuration, and applicable legal requirements.

When personal data is no longer required, it will be deleted or anonymised, unless further retention is legally required or justified.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies to ensure its proper functioning and, where enabled, to analyse website usage or support marketing activities.

Cookies may include:

Strictly necessary cookies: required for essential website functions, such as shopping cart operations, checkout, and security;
Preference cookies: used to remember settings or preferences;
Analytics cookies: used to understand how visitors interact with the website;
Advertising cookies: used to measure advertising performance or support personalised advertising, where applicable.

Strictly necessary cookies may be used without consent where permitted by law. Non-essential cookies and similar technologies will only be activated after obtaining consent where required.

You may manage your cookie preferences through the cookie settings available on our website, where implemented. You can also configure your browser to block or delete cookies, although this may affect some website functions.

For more information about specific cookies, their purposes, and retention periods, please consult our Cookie Policy and cookie consent settings.

11. Marketing Communications

We may send promotional communications about LUTHIQ products, new releases, or offers where permitted by applicable law.

Where consent is required, we will only send such communications after obtaining it. You may withdraw your consent or unsubscribe at any time by using the unsubscribe mechanism included in the communication, where available, or by contacting us at support@luthiq.art.

Unsubscribing from marketing communications will not affect transactional messages necessary to fulfil your orders, such as order confirmations, payment updates, or shipping notifications.

12. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

Such measures may include access controls, security updates, appropriate service-provider arrangements, and other safeguards proportionate to the nature of the information processed and the risks involved.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

If a personal data breach occurs, we will take the measures required by applicable law, including notifying the relevant supervisory authority and affected individuals where legally required.

13. Your Data Protection Rights

Under the GDPR, you may have the right to:

Access: request confirmation of whether we process your personal data and obtain a copy;
Rectification: request correction of inaccurate or incomplete information;
Erasure: request deletion of your personal data where the legal conditions are met;
Restriction: request that we restrict certain processing activities;
Data portability: receive certain personal data in a structured, commonly used, machine-readable format and, where applicable, request its transmission to another controller;
Object: object to processing based on legitimate interests, on grounds relating to your particular situation;
Withdraw consent: withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
Marketing objection: object at any time to the processing of personal data for direct marketing purposes.

These rights are subject to the conditions and exceptions established by applicable law. For example, we may need to retain certain information to comply with legal obligations, including tax and accounting requirements.

To exercise your rights, contact us at:

support@luthiq.art

We may need to verify your identity before responding to your request. We will respond within the period required by applicable law, generally within one month of receiving the request, subject to lawful extensions where permitted.

14. Right to Lodge a Complaint

If you believe that your personal data has been processed in breach of applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

In Portugal, the supervisory authority is:

Comissão Nacional de Proteção de Dados (CNPD)

Website: CNPD

You may also contact us directly so that we can attempt to address your concerns.

15. Third-Party Websites and Social Media

Our website may contain links to third-party websites or services, including social media platforms.

When you access those services, your personal data may be processed by the relevant third party under its own privacy policy and terms.

LUTHIQ is not responsible for the privacy practices of third-party websites that it does not control. We encourage you to review their privacy policies before providing personal information.

Interactions with LUTHIQ through social media platforms may also be subject to the privacy policies and settings of those platforms.

16. Children’s Privacy

Our website and products are not specifically directed at children.

We do not knowingly collect personal data from children in circumstances where such collection would be unlawful. Where applicable law requires parental or legal representative authorisation, we will respect those requirements.

If you believe that a child has provided personal data to us unlawfully, please contact us so that we can assess the situation and take appropriate action.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, service providers, or applicable legislation.

The latest version will be published on this page, together with the date of its most recent update.

We encourage you to review this page periodically to remain informed about how we protect your personal data.

18. Contact Us

If you have questions about this Privacy Policy or how LUTHIQ processes personal data, please contact:

José Ramiro & Alves, Lda. — LUTHIQ
R. Padre Manuel Guimarães 33
4700-284 Braga
Portugal