Privacy Policy

Data Controller Information

This Privacy Policy describes how astratrixis S.A. ("we," "us," or "our") collects, uses, and protects your personal information when you visit our website or use our beauty brand social commerce analytics services. astratrixis S.A. is the data controller for the personal data we collect, with our registered office at Rua Garrett 20, 4050-325 Porto, Portugal (Registration Number: 316497892).

Data Collection

We collect various types of personal data to provide and improve our beauty brand analytics services. The data we collect includes information you provide directly to us, such as when you fill out contact forms, subscribe to our newsletter, or communicate with us. This may include your name, email address, phone number, company information, and any other details you choose to share. We also automatically collect certain information about your device and how you interact with our website, including your IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits.

How We Use Your Information

We use the personal data we collect for several legitimate business purposes. Primarily, we use of your data to provide our beauty brand analytics services, respond to your enquiries, and communicate with you about our services. We may also use your information to send you marketing communications about our analytics tools and industry insights, though you can opt out of these at any time. Additionally, we analyse usage patterns to improve our website and services, ensure the security of our systems, and comply with legal obligations. All processing is conducted in accordance with applicable data protection laws and is based on legitimate interests, contractual necessity, or your consent.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Third Parties

We do not sell, trade, or otherwise transfer your personal data to third parties except as described in this policy. We may share your information with trusted service providers who assist us in operating our website and conducting our business, such as web hosting providers, email marketing services, and analytics platforms. These parties are contractually bound to keep your information confidential and use it only for the purposes we specify. We may also disclose your information if required by law, to protect our rights or property, or in connection with a business transaction such as a merger or acquisition.

Your Rights

Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, you have several rights regarding your personal data. Your rights include the right to access your personal data and receive a copy of it, the right to rectify inaccurate or incomplete data, the right to erasure (deletion) of your data under certain circumstances, the right to restrict processing of your data, the right to data portability, and the right to object to processing based on legitimate interests. You also have the right to withdraw your consent at any time where processing is based on consent, and the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Generally, we retain contact information and communication records for up to seven years after our last interaction with you, website analytics data for up to 26 months, and marketing consent records until you withdraw your consent or we no longer have a legitimate need to retain them. When we no longer need your personal data, we will securely delete or anonymise it.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, regular security assessments, access controls limiting who can access your data, and staff training on data protection principles. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

International Data Transfers

As we operate primarily within the European Union, your data is generally processed within the EU. If we need to transfer your data outside the EU, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission, to protect your data in accordance with EU data protection standards.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or need to contact us regarding your personal data, please reach out to us. You can contact us by email at privacy@astratrixis.top, by phone at +351 227 454 751, or by post at astratrixis S.A., Rua Garrett 20, 4050-325 Porto, Portugal. We will respond to your enquiry within one month of receipt, or sooner where possible.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal bases: consent (where you have given clear consent for us to process your data for specific purposes), contract (where processing is necessary for the performance of a contract with you), legitimate interests (where we have a legitimate business interest that is not overridden by your privacy rights), and legal obligation (where we are required by law to process your data). We will always ensure that our processing is fair, lawful, and transparent.