Privacy Policy

Data Controller Information

The data controller for your personal information is:

Data We Collect

We collect and process various types of personal data when you interact with our website and services. The data we collect includes:

• Contact Information: Name, email address, phone number, company name, and postal address when you contact us or request our services
• Technical Information: IP address, browser type, operating system, referring URLs, and pages visited on our website
• Communication Data: Records of correspondence when you contact us via email, phone, or contact forms
• Cookie Data: Information collected through cookies and similar tracking technologies as detailed in our cookie policy
• Service Data: Information related to the cosmetic regulatory services we provide to you

This data collection enables us to provide our cosmetic product labelling regulation services effectively and maintain communication with our clients.

How We Use Your Information

We process your personal data for the following purposes and under the following legal bases:

We use of your data is always proportionate and limited to what is necessary for the specified purposes.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• Service Providers: We may share data with trusted third-party service providers who assist us in operating our website and providing services (e.g., hosting providers, email services)
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity
• Consent: When you have given explicit consent for specific sharing purposes

All third-party service providers are contractually bound to protect your data and use it only for the purposes specified.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy or as required by law:

• Contact Enquiries: 3 years from last contact for potential future service provision
• Client Data: 7 years after service completion for legal and regulatory compliance
• Website Analytics: 26 months as per Google Analytics retention settings
• Marketing Data: Until consent is withdrawn or 3 years from last engagement

After the retention period expires, we securely delete or anonymise your personal data in accordance with our data protection procedures.

Your Rights

Under the General Data Protection Regulation (GDPR) and applicable data protection laws, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at [email protected] or +351 232186738. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training on data protection
• Secure data backup and recovery procedures
• Regular monitoring and incident response procedures

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Certification schemes and codes of conduct

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) if you believe we have not handled your personal data in accordance with applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you via email if you have provided your email address
• Post a notice on our website highlighting the changes
• Obtain your consent where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.