Natalia.pt · GDPR Compliance
1. Introduction
This Privacy Policy describes how Natalia.pt, a commercial project operated by Elitelashes Lda., based in Albufeira, Portugal, processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Lei n.º 58/2019.
Browsing the website and creating an account imply acknowledgement and acceptance of this policy.
2. Personal Data Collected
We may collect the following categories of data:
- Identification data (name, NIF/Tax ID, email, telephone)
- Billing and delivery address
- Payment data (processed by certified entities)
- Order history
- Browsing data and cookies
3. Purposes and Legal Basis
Data is processed on the basis of the following purposes:
- Performance of contract (Art. 6.º nº1 b) GDPR) – order processing
- Compliance with legal obligations (Art. 6.º nº1 c)) – invoicing and tax obligations
- Legitimate interest (Art. 6.º nº1 f)) – fraud prevention and security
- Consent (Art. 6.º nº1 a)) – sending newsletters and marketing
4. Data Retention
Data is retained only for the period necessary:
- Customer data: as long as the account remains active
- Tax data: 10 years (legal obligation)
- Marketing data: until withdrawal of consent
5. Data Sharing
Data may be shared with:
- Couriers and carriers
- Payment service providers
- IT service providers
- Public authorities, when legally required
Personal data is never sold to third parties.
6. Cookies
The website uses essential, analytical and functional cookies. Non-essential cookies are only activated with the user's explicit consent.
The user may configure or withdraw consent at any time through the cookie settings.
7. Security
Appropriate technical and organisational measures are implemented, including SSL encryption, access controls and security monitoring.
8. Data Subject Rights
Pursuant to the GDPR, the data subject has the right to:
- Access to data
- Rectification
- Erasure (“right to be forgotten”)
- Restriction of processing
- Data portability
- Object to processing
- Withdraw consent at any time
To exercise your rights, you may contact: info@natalia.pt
The data subject may also lodge a complaint with the National Data Protection Commission (CNPD) – www.cnpd.pt
9. Amendments
Natalia.pt reserves the right to update this Policy at any time, with changes published on this page.
