Privacy Policy

Natalia.pt · GDPR Compliance

1. Introduction

This Privacy Policy explains how Natalia.pt, operated by Elitelashes Lda. in Portugal, processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 and Portuguese Law 58/2019.

 

2. Data Collected

• Identification data (name, email, phone, VAT number)
• Billing and delivery address
• Payment details (processed by certified providers)
• Order history
• Browsing and cookie data

 

3. Legal Basis

• Contract performance (Art. 6(1)(b))
• Legal obligation (Art. 6(1)(c))
• Legitimate interest (Art. 6(1)(f))
• Consent (Art. 6(1)(a))

 

4. Data Retention

• Customer data: while account remains active
• Accounting data: 10 years
• Marketing data: until consent withdrawal

 

5. Data Sharing

Data may be shared with logistics providers, payment processors, IT service providers, and public authorities when legally required.

 

6. Cookies

Non-essential cookies are only activated after explicit user consent. Users may manage preferences at any time.

 

7. Data Subject Rights

• Access
• Rectification
• Erasure
• Restriction
• Portability
• Objection
• Withdraw consent

Requests may be sent to: info@natalia.pt

Complaints may be filed with the Portuguese Data Protection Authority (CNPD) – www.cnpd.pt

 

8. Updates

Natalia.pt reserves the right to amend this policy at any time.