Privacy Policy
Natalia.pt · GDPR Compliance
1. Introduction
This Privacy Policy explains how Natalia.pt, operated by Elitelashes Lda. in Portugal, processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 and Portuguese Law 58/2019.
2. Data Collected
- Identification data (name, email, phone, VAT number)
- Billing and delivery address
- Payment details (processed by certified providers)
- Order history
- Browsing and cookie data
3. Legal Basis
- Contract performance (Art. 6(1)(b))
- Legal obligation (Art. 6(1)(c))
- Legitimate interest (Art. 6(1)(f))
- Consent (Art. 6(1)(a))
4. Data Retention
- Customer data: while account remains active
- Accounting data: 10 years
- Marketing data: until consent withdrawal
5. Data Sharing
Data may be shared with logistics providers, payment processors, IT service providers, and public authorities when legally required.
6. Cookies
Non-essential cookies are only activated after explicit user consent. Users may manage preferences at any time.
7. Data Subject Rights
- Access
- Rectification
- Erasure
- Restriction
- Portability
- Objection
- Withdraw consent
Requests may be sent to: info@natalia.pt
Complaints may be filed with the Portuguese Data Protection Authority (CNPD) – www.cnpd.pt
8. Updates
Natalia.pt reserves the right to amend this policy at any time.