Privacy Policy (GDPR)
Lowell values the privacy and security of its customers.
This policy complies with Regulation (EU) 2016/679 (GDPR) and Law no. 58/2019.
Data Controller
Lowell Professional | LOWELL COSMETICOS DE PORTUGAL, LDA
NIF 516638530 | Coimbra, Portugal
E-mail: lowelleurope@gmail.com
WhatsApp: +351 932 074 858
Data Collection
We only collect data strictly necessary to:
- Process orders and payments
- Manage customer accounts
- Send support communications
- Send newsletters (with double opt-in consent)
Legal Basis
Data processing is based on:
- Contract performance (online purchases)
- Explicit consent (marketing)
- Legitimate interest (service improvement)
- Compliance with legal obligations (invoicing and warranties)
Data Sharing
Data may be shared with:
- Shopify (e-commerce platform, Canada/USA, with EU standard contractual clauses)
- Shipping carriers (DPD, Correos Express)
- Payment gateways (Ifthenpay, PayPal, Shopify Payments)
Data Retention
- Account data: up to 2 years after last interaction
- Invoicing data: 10 years (tax obligation)
- Marketing data: until consent withdrawal
Data Subject Rights
The user has the right to:
- Access, rectification, and erasure of their data
- Restriction and objection to processing
- Data portability
- Withdraw consent at any time
To exercise these rights, please contact us via email or WhatsApp.
Security
Shopify implements SSL/TLS encryption and PCI-DSS certified security measures.
Lowell does not have direct access to credit card data.