Privacy Policy

Introduction

This Privacy Policy explains how flowprotrixum S.A. ("we," "our," or "us") collects, uses, processes, and protects your personal information when you visit our website, use our services, or interact with our beauty product demand analytics systems. We are committed to protecting your privacy and ensuring transparency in how we handle your personal data.

flowprotrixum S.A. is the data controller for the personal information we collect and process. We are registered in Portugal with registration number 621478593 and our registered office is located at Avenida Almirante Reis 267, 1006-775 Lisbon, Portugal.

Data Collection

We collect various types of personal data to provide and improve our beauty analytics services. The data we collect includes information you provide directly to us, information collected automatically through your use of our services, and information obtained from third-party sources where legally permitted.

Information You Provide

When you interact with our services, you may provide us with personal information including your name, email address, phone number, company details, job title, and any other information you choose to share through our contact forms, consultation requests, or direct communications with our team.

Automatically Collected Information

We automatically collect certain information when you visit our website, including your IP address, browser type and version, operating system, referring website, pages visited, time spent on pages, and other technical information that helps us understand how our website is used and improve our services.

Analytics and Business Data

For our business clients, we may collect and process business analytics data, market research information, and other commercial data necessary to provide our demand forecasting and market intelligence services. This data is processed under separate data processing agreements with our business clients.

How We Use Your Information

We use the personal information we collect for various legitimate business purposes. How we use your data depends on which services you use and how you interact with our platform. We use your information to provide, maintain, and improve our services, respond to your enquiries and support requests, and communicate with you about our services and updates.

We also use your information to personalise your experience with our services, conduct analytics to understand how our services are used, comply with legal obligations and protect our rights, and prevent fraud and ensure the security of our systems. Additionally, we may use your information for marketing purposes where you have provided consent or where we have a legitimate interest to do so.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds: consent where you have given clear consent for us to process your personal data for specific purposes, contract performance where processing is necessary to fulfil our contractual obligations to you, legitimate interests where we have legitimate business interests that do not override your privacy rights, and legal compliance where we must process your data to comply with legal obligations.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

Our website uses various types of cookies including essential cookies required for basic website functionality, analytics cookies to understand website usage patterns, functional cookies to remember your preferences and settings, and marketing cookies for advertising and personalisation purposes.

For detailed information about the specific cookies we use and how to control them, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in certain limited circumstances including with service providers who assist us in operating our website and providing our services, with professional advisers such as lawyers, accountants, and consultants, and with law enforcement or regulatory authorities when required by law.

We may also share information in connection with business transfers, such as mergers or acquisitions, and with your explicit consent for specific purposes. All third parties with whom we share your data are required to maintain appropriate security measures and use your information only for the purposes specified.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention period depends on the type of information and the purpose for which it was collected.

Generally, we retain contact information and communication records for up to 7 years after our last interaction, website analytics data for up to 26 months, and business analytics data as specified in our agreements with business clients. When personal data is no longer needed, we securely delete or anonymise it in accordance with our data retention procedures.

Your Rights

Under GDPR and other applicable privacy laws, you have certain rights regarding your personal data. These rights include the right to access your personal data and obtain information about how we process it, the right to rectify inaccurate or incomplete personal data, and the right to request deletion of your personal data in certain circumstances.

You also have the right to restrict processing of your personal data in specific situations, the right to data portability in certain cases, the right to object to processing based on legitimate interests, and the right to withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us using the information provided in the contact section below. We will respond to your request within one month of receipt, and we may request additional information to verify your identity before processing your request.

International Data Transfers

Your personal data is primarily processed within the European Union. If we transfer your data outside the EU, we ensure appropriate safeguards are in place to protect your information, including adequacy decisions by the European Commission, standard contractual clauses, or other approved transfer mechanisms.

We work with certain service providers who may process data outside the EU, but we ensure all such transfers comply with applicable data protection laws and include appropriate safeguards to protect your privacy rights.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, regular security assessments and updates, access controls and authentication procedures, and staff training on data protection and security practices.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we continuously work to maintain and improve our security measures.

Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately so we can take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date at the top of this policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information. Your continued use of our services after any changes indicates your acceptance of the updated policy.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us using the following information:

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados) if you believe we have not handled your personal data in accordance with applicable law.

Supervisory Authority

If you have concerns about our data processing practices that we have not been able to resolve, you have the right to lodge a complaint with the relevant supervisory authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD).

You can contact the CNPD at: Rua de São Bento, 148-3°, 1200-821 Lisboa, Portugal, or visit their website for more information about filing a complaint.