Privacy Policy

Depending on how you interact with us or the Services you use, we may use personal information for the following purposes:

• To Provide, Customize, and Improve Services: We use your personal information to provide the Services to you, including to perform our contract with you, process payments, process orders, remember preferences and items of interest, send notifications related to your account, process purchases, returns, exchanges, or other transactions, create, maintain, and manage your account, arrange shipping, and facilitate any returns and exchanges.
• Marketing and Advertising: We use your personal information for marketing and promotional purposes, such as sending you marketing, advertising, and promotional communications via email, text message, or mail.
• Security and Fraud Prevention: We use your personal information to authenticate your account, provide a secure payment and purchase experience, and detect, investigate, or take action regarding potential fraudulent activity.
• Communications with You: We use your personal information to provide you with customer support, respond to your communications, and maintain a business relationship with you.
• Legal Reasons: We use your personal information to comply with applicable law or to respond to valid legal processes.

We may collect or process the following categories of personal information:

• Contact details: name, address, billing address, shipping address, phone number, and email address.
• Financial information: credit card numbers, debit card and financial account numbers, payment card information, transaction details and payment method.
• Account information: username, password, security questions, preferences, and settings.
• Transaction information: items you view, add to cart, wishlist or purchase, return, exchange or cancel.
• Communications with us: information that you include in communications with us.
• Device information: information about your device, browser or network connection, IP address, and other unique identifiers.
• Usage information: information about your interaction with the Services.

Sources: Directly from you, automatically through the Services, through our service providers, and through our partners or third parties.

We process your personal data based on the following legal grounds:

• Contract execution: when processing is necessary for the performance of a contract to which you are a party or for pre-contractual steps at your request.
• Consent: when you have given us your consent to process your personal data for one or more specific purposes.
• Legitimate interests: when processing is necessary for the purposes of the legitimate interests pursued by us or by third parties.
• Legal obligation: when treatment is necessary for compliance with a legal obligation to which we are subject.

We may disclose your personal information to third parties in the following circumstances:

• With Shopify, vendors, and other third parties who provide services on our behalf (IT management, payment processing, data analytics, customer service, cloud storage, processing, and shipping).
• With business and marketing partners to provide marketing and advertising services.
• When you instruct, request, or otherwise consent to our disclosure.
• With our affiliates or otherwise within our group of companies.
• In connection with a business transaction, such as a merger or insolvency, to fulfill legal obligations.

The controller of your personal data is:

Castelbel – Artigos de Beleza, SA
Conselheiro Araújo de Barros Street 209
4475-178 Maia, Portugal
Email: marketing@castelbel.com

The Services are hosted by Shopify, which collects and processes your personal information related to your access to and use of the Services.

The length of time we retain your personal information depends on various factors, such as:

• If we need the information to maintain your account.
• To provide you with Services
• Fulfill legal obligations
• Resolve disputes
• Enforce other applicable contracts and policies.

We may transfer, store, and process your personal information outside of your country of residence.

If we transfer your personal information outside the European Economic Area or the United Kingdom, we will use recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses or any equivalent contracts issued by the relevant UK competent authority, except where the data transfer takes place to a country that has been determined to provide an appropriate level of protection.

Please be aware that no security measure is perfect or impenetrable, therefore we cannot guarantee "perfect security". Furthermore, any information you send us may not be secure during transit.

We recommend that you do not use insecure channels to communicate confidential or sensitive information to us. If you choose to use the Services and create an account, you are responsible for keeping your account credentials secure.

Depending on your place of residence, you may have the following rights:

• Right of Access: Request access to your personal information.
• Right to Erasure: Request the deletion of your personal information.
• Right to Rectification: request the correction of your personal information.
• Right to Data Portability: to receive a copy of your personal information.
• Right to Object: to object to the processing of your data.
• Revocation of Consent: to revoke previously given consent.

To exercise your rights, please contact us at marketing@castelbel.com

If you wish to complain about how we handle your personal information, you can contact us using the contact details provided.

Depending on your place of residence, you may have the right to register your complaint with the local data protection authority.