Privacy Policy

Last updated: 15th January 2026

Introduction

polarluxor S.A. ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website polarluxor.top, use our salon analytics services, or interact with us in any way.

This policy applies to all users of our services and visitors to our website. By using our services or visiting our website, you consent to the data collection and use practices described in this Privacy Policy.

Data Controller Information

polarluxor S.A. is the data controller responsible for your personal information. Our company is registered in Portugal with registration number 628574349 and VAT number PT628574195. Our registered office is located at Avenida Almirante Reis 230, 4027-650 Porto, Portugal.

Data We Collect

We collect various types of information in connection with the services we provide, including:

Personal Information You Provide

When you interact with our services, we may collect personal information that you voluntarily provide, including:

• Contact information (name, email address, phone number, company name)
• Account information when you create an account or use our services
• Communication data when you contact us or participate in surveys
• Payment information when you purchase our services
• Professional information related to your salon or spa business

Automatically Collected Information

When you visit our website or use our services, we may automatically collect certain information, including:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, click patterns)
• Technical data (screen resolution, device identifiers)
• Location data (general geographic location based on IP address)

How We Use Your Information

We use the personal information we collect for various purposes, including to:

• Provide, operate, and maintain our salon analytics services
• Process transactions and manage your account
• Communicate with you about our services, updates, and support
• Improve and personalise your experience with our services
• Conduct research and analytics to enhance our platform
• Comply with legal obligations and protect our rights
• Send marketing communications (with your consent where required)
• Detect, prevent, and address technical issues and security threats

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contract: To perform our contractual obligations when providing our services
• Legitimate Interest: For business operations, security, and service improvement
• Consent: For marketing communications and optional features
• Legal Obligation: To comply with applicable laws and regulations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except as described below:

• Service Providers: We may share data with trusted third-party service providers who assist us in operating our services
• Legal Requirements: We may disclose information when required by law or to protect our rights
• Business Transfers: In the event of a merger, acquisition, or sale, your information may be transferred
• With Your Consent: We may share information with your explicit consent

International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. When we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses approved by the European Commission.

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods depend on the nature of the information and the purposes for which we process it:

• Account information: Retained while your account is active and for 7 years after closure
• Transaction records: Retained for 7 years for accounting and legal purposes
• Marketing data: Retained until you withdraw consent or for 3 years of inactivity
• Website analytics: Typically retained for 26 months

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal information:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of processing under certain conditions
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the contact information provided below.

Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training. However, no method of transmission over the internet or electronic storage is completely secure.

Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados) if you believe we have not handled your personal data in accordance with applicable data protection laws.