Política de privacidad

Privacy Policy

Who we are and how to contact us

VITALI operates fragrancesvitali.com and the related store, products, features and services (the “Services”). Our store is powered by Shopify. This policy explains how personal information is collected, used and shared when you browse, shop, create an account or contact us.

Data controller / legal operator: [TO BE COMPLETED]
Full business address: [TO BE COMPLETED], Brazil
Privacy contact: contact@fragrancesvitali.com
EU representative, where required: [TO BE COMPLETED — identity and contact details]
Data protection officer, if applicable: [TO BE COMPLETED]

Personal information we collect

Depending on your interaction with the Services, we process contact information such as name, email, telephone, billing and shipping addresses; payment and transaction information; account credentials and preferences; products viewed, placed in a cart, purchased, returned or cancelled; customer service messages; and device, network, IP address and usage information. Payment providers process payment credentials as necessary for your chosen payment method.

We obtain information directly from you, automatically through your device and cookies or similar technologies, and from service providers and partners supporting the Services.

How and why we use information

• Orders and accounts: to process payments, fulfill and deliver orders, manage accounts, remember preferences, and handle returns and support. Where GDPR applies, the legal basis is contract performance or steps you request before entering a contract.
• Security and service improvement: to detect fraud, secure the store, investigate misuse and improve the shopping experience. Where applicable, we rely on legitimate interests in protecting and operating our business, balanced against your rights, or consent where required.
• Marketing and personalization: to send promotional messages and display or personalize advertisements and product recommendations, including based on browsing and purchase activity. We obtain consent where required. Where another lawful basis is available for a specific marketing activity, it remains subject to your applicable objection and opt-out rights.
• Legal requirements: to maintain required records, respond to valid legal requests and establish, exercise or defend legal claims, under the legal grounds applicable to those activities.

Providing information needed to process payment and delivery is necessary to fulfill an order. If you do not provide it, we may be unable to complete your purchase. Optional marketing consent is not a condition of purchasing.

Sharing information

We share information with Shopify and service providers supporting payments, IT, hosting, analytics, customer support, order fulfillment and delivery. We may also share information with business and advertising partners for the marketing activities described here, with your authorization where needed, with affiliates where relevant, or as part of a lawful business transaction. Disclosure may also be necessary to meet legal obligations or protect rights and the Services.

Additional provider and advertising-tool details: [TO BE COMPLETED — active providers and purposes]. Each recipient's role and use of information depend on the service and applicable law.

Our relationship with Shopify

Shopify hosts the Services and processes information about your access and use to operate and improve them. Information submitted through the Services is transmitted to Shopify and relevant providers, potentially in other countries. The store's enhanced Shopify features may use information about interactions with this store, other merchants and Shopify to protect, improve and grow the business, including personalized advertising.

For certain enhanced features, Shopify is responsible for its own processing and related rights requests. See the Shopify Consumer Privacy Policy and Shopify Privacy Portal for details and available choices.

Cookies and your marketing choices

Cookies and similar technologies support store functionality and may support analytics and advertising. Cookie inventory, durations and preference-control location: [TO BE COMPLETED]. Where consent is legally required, optional technologies require your consent, and you must be able to withdraw it. Browser settings can also restrict cookies, although some essential store features may be affected.

You can unsubscribe from promotional emails using their unsubscribe link or contact us. We may still send order and service messages. You may object to direct marketing at any time. Contact us about applicable rights to opt out of targeted advertising or data sharing.

Retention and security

We retain information for the time needed to provide the Services, maintain an active account, comply with applicable recordkeeping requirements, resolve disputes and enforce lawful agreements. Retention periods by data category: [TO BE COMPLETED]. We apply appropriate safeguards; no storage or transmission system is completely secure. Please do not email passwords or full payment card details.

International transfers

Your information may be stored or processed outside your country, including by Shopify and other providers. Where GDPR applies to a transfer outside the EEA, we use an applicable adequacy decision or appropriate safeguards, such as the European Commission's standard contractual clauses, unless a lawful exception applies. Equivalent UK safeguards apply where required. You may contact us for information about the safeguards relevant to your data and how to obtain a copy. Additional transfer destinations and mechanisms: [TO BE COMPLETED].

Your rights

Depending on applicable law, you may request access, correction, erasure, restriction or portability of your information, and object to certain processing. You may withdraw consent without affecting processing already lawfully carried out. Where Brazilian LGPD applies, you may also request confirmation of processing and information about sharing, and seek anonymization, blocking or deletion where legally available.

Email contact@fragrancesvitali.com to exercise your rights. We may request proportionate identity verification or proof that a representative is authorized. We do not discriminate against you for exercising rights. GDPR requests are answered without undue delay and normally within one month. Where legally permitted, this may be extended by two further months for complexity or volume, with notice and reasons within the first month. Other statutory deadlines apply where relevant.

You may complain to the data protection authority in your EEA country of habitual residence, work or the alleged infringement, or another competent authority, including the ANPD in Brazil where applicable. You do not have to contact us first.

Automated decisions

Details of any solely automated decisions producing legal or similarly significant effects, including meaningful information about their logic and consequences: [TO BE COMPLETED — confirm whether any apply]. Where such processing is subject to GDPR safeguards, you retain the applicable rights to human intervention, express your view and contest the decision.

Children and third-party websites

The Services are not directed to children, and we do not knowingly collect children's information in violation of applicable law. A parent or guardian can contact us about a child's information. Third-party links and social features are governed by the relevant third party's practices. Information you publish in public areas may be visible to others.

Changes to this policy

We may update this policy to reflect changes in the Services, practices or law. The updated version will be published here, with further notice where required. For privacy questions, this policy takes precedence over inconsistent website terms.