Privacy policy

1. Introduction

Protecting your privacy is a priority for us. This Privacy Policy describes how we collect, use, store and protect your personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (GDPR), and other applicable data protection legislation.

By using our website or providing us with your personal data, you declare that you understand and accept the terms of this Privacy Policy.

 

 

2. Data Controller

The data controller responsible for your personal data is:
 Kitchen Makeup boutique
https://kitchen-makeup.com
Email: geral@kitchen-makeup.com
Magentimagem Lda - NIF 513492283

 

 

3. What data do we collect?

We may collect the following personal data, with your consent and strictly in accordance with the law:

  • Full name

  • Email address

  • Telephone number

  • Tax identification number (where provided by customers)

  • Delivery and/or billing address

  • Payment details (including credit card data, processed securely and in encrypted form)

  • Purchase history and interactions with the website

  • Information collected automatically through cookies (see section 8)

 

 

4. Purposes of data processing

The personal data collected is processed for the following purposes:

  • Processing and dispatching orders

  • Managing the customer account

  • Providing customer support services

  • Sending promotional communications and newsletters (with consent)

  • Participation in training courses, workshops, competitions or promotional campaigns

  • Compliance with legal and tax obligations

  • Continuous improvement of the website and the user experience

  • Managing the wishlist of the customer account

  • Managing the "Pitadas" loyalty programme and awarding points
  • Collecting and publishing customer reviews

 

 

5. Legal basis for processing

Your data is processed on the following legal bases:

  • Performance of a contract (purchase of products/services)

  • Compliance with legal obligations

  • Express consent, where required (e.g. marketing communications)

  • Legitimate interest, in particular in improving our services and protecting our business activity

 

 

6. Sharing data with third parties

Your personal data will not be sold, exchanged or disclosed to third parties, except in the following situations:

  • Service providers essential to the operation of the online shop (e.g. payment platforms, hosting services, logistics partners), who act as processors and are contractually bound to comply with the GDPR.

  • Compliance with legal obligations or court orders.

  • Protection of the rights or safety of the company, users or the general public.

    Some of these service providers may process data outside the European Economic Area, in particular in the United States of America. In such cases, the transfer is based on appropriate safeguards under the GDPR (such as standard contractual clauses or adequacy decisions).


 

 

7. Data security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or improper disclosure, including:

  • Use of encryption protocols (SSL)

  • Access to personal data restricted to authorised staff only

  • Secure storage of data on infrastructure with security controls

 

 

8. Use of cookies

Our website uses cookies to ensure correct operation, improve your browsing experience and collect analytical data. The types of cookies used are:

  • Strictly necessary cookies: Essential for the operation of the website (e.g. session and shopping cart management)

  • Functional cookies: Store user preferences (e.g. language, login)

  • Performance cookies: Help improve the performance and usability of the site

  • Marketing/targeting cookies: Allow content and advertisements to be personalised, and information to be shared with social networks

You can manage your cookie preferences through your browser settings or the consent banner on the site.

For more information about cookies, see www.aboutcookies.org.

 

 

9. Data retention

Your personal data will be kept only for the period necessary for the purposes described in this policy or for as long as your consent remains in place (where applicable). In certain cases, data may be kept for longer periods where legal obligations so require.

 

 

10. Your rights as a data subject

Under the legislation in force, you have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Erase your data ("right to be forgotten")

  • Restrict the processing of your data

  • Object to the processing of your data

  • Withdraw your consent, where the processing is based on it

  • Request the portability of your data to another data controller

  • Lodge a complaint with the supervisory authority: Comissão Nacional de Proteção de Dados (CNPD) – www.cnpd.pt

To exercise your rights, send a request to: geral@kitchen-makeup.com

 

 

11. Changes to the Privacy Policy

We reserve the right to update or amend this Privacy Policy at any time. Changes will be published on this page with an update date. We recommend that you consult this document regularly.

Date of last update: 27 October 2026

 

 

12. Contact

For questions relating to this Privacy Policy, the processing of your data or the exercise of your rights, you can contact us at:

Email: geral@kitchen-makeup.com

Address: Rua das Galés, N 9A, 1990 612 Lisboa