Política de privacidad

Last updated: 6 September 2024

This Privacy Policy describes how Hey Whitening ("we", "us", "our", or the "Website") collects, uses, and discloses your personal information when you visit, use our services, make a purchase from heywhitening.com (the "Website"), or otherwise communicate with us regarding the Website (collectively, the "Services"). For the purposes of this Privacy Policy, “you” and “your” refer to you as a user of the Services, whether as a customer, visitor, or any other individual whose information we collect according to this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the updated Privacy Policy on the Website, revise the “Last updated” date, and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide our Services, we collect personal information about you from various sources, as set out below. The type of information we collect and use depends on how you interact with us.

In addition to the specific uses described below, we may use the information we collect about you to communicate with you, provide or improve the Services, comply with legal obligations, enforce any applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

Personal Information We Collect

The types of personal information we collect depend on how you interact with our Website and use our Services. When we use the term “personal information,” we refer to information that identifies, relates to, describes, or can be associated with you. The following sections describe the categories and specific types of personal information we collect.

Information You Provide Directly

Information you provide directly through our Services may include:

  • Contact information including your name, address, phone number, and email address.

  • Order information including your billing address, shipping address, payment confirmation, email address, and phone number.

  • Account information including your username, password, security questions, and other account security details.

  • Customer support information, including any messages or details you choose to share with us when contacting support.

Certain features of the Services may require you to provide information directly to us. You may choose not to provide this information, but this may limit your access to some features.

Information We Collect Automatically

We may also automatically collect certain information about your interactions with the Services ("Usage Data"). This may include the use of cookies, pixels, and similar technologies. Usage Data may include:

  • How you access and use the Website or your account

  • Device and browser information

  • Network connection details

  • IP address

  • Interaction data with the Services

Information We Obtain from Third Parties

We may also obtain information from third parties, such as service providers who collect data on our behalf. This includes:

  • Website and service support providers, such as Shopify.

  • Payment processors, who collect payment information (e.g., bank account, credit/debit card details, billing address) to process your order and deliver your requested services.

  • Marketing and analytics providers, including those who use tracking technologies like pixels, SDKs, cookies, and third-party scripts.

All third-party data is treated in accordance with this Privacy Policy. See also the section “Third-Party Websites and Links”.

How We Use Your Personal Information

Providing Products and Services

We use your personal information to fulfil our contractual obligations and provide the Services, including:

  • Processing payments and orders

  • Managing your account

  • Communicating with you about your orders, returns, or transactions

  • Facilitating shipping, returns, and exchanges

  • Enhancing your experience through Shopify’s platform integrations (as per their Privacy Policy)

Marketing and Advertising

We may use your personal information for marketing purposes, including:

  • Sending promotional emails, texts, or mail

  • Showing personalised product or service ads

  • Improving targeting and relevance of content

If you reside in the EEA, the legal basis is our legitimate interest in promoting our products under Art. 6(1)(f) GDPR.

Security and Fraud Prevention

We use your personal information to detect and investigate potential fraud, abuse, or malicious activity. If you create an account, it is your responsibility to keep login credentials secure. Contact us immediately if you believe your account has been compromised.

(EEA residents: Processing is based on our legitimate interest under Art. 6(1)(f) GDPR.)

Communication and Service Improvement

We use your data to provide customer support and improve our Services. This is also based on our legitimate interest under Art. 6(1)(f) GDPR.

Cookies

Like many websites, we use cookies. For details on cookies used by Shopify, visit: https://www.shopify.com/legal/cookies.
You can disable cookies via your browser settings, though doing so may affect your experience and functionality of the Services.

Disclosure of Personal Information

We may share your personal information in the following circumstances:

  • With service providers (e.g., IT, payments, analytics, logistics, cloud storage)

  • With business and marketing partners, according to their privacy notices

  • With affiliates or corporate group entities, in our legitimate business interest

  • At your request or with your consent, e.g., via social media or integrations

  • In business transactions, legal obligations, or to enforce terms of service

Categories of Recipients

Category Recipients
Identifiers Contact and account details
Commercial info Orders, purchases, customer service interactions
Internet/network data Usage data
Geolocation Based on IP or technical methods
Service Providers e.g., payment processors, logistics, analytics
Business & marketing partners As per their policies
Affiliates Corporate group entities

We do not use or disclose sensitive personal information without your consent or for inferring personal characteristics.

Third-Party Sites and Links

Our Website may contain links to third-party platforms. We are not responsible for their privacy or security practices. Review their privacy policies before submitting personal data.

Children's Data

Our Services are not intended for children. We do not knowingly collect data from individuals under 16. If you are a parent or guardian and believe your child has shared personal data with us, please contact us to request deletion.

Security and Retention

We implement reasonable security measures but cannot guarantee absolute protection. Avoid sending sensitive information over unsecured channels.

We retain your data only as long as necessary for:

  • Managing your account

  • Providing Services

  • Complying with legal obligations

  • Resolving disputes

  • Enforcing contracts

Your Rights

Depending on your location, you may have rights including:

  • Access to your data

  • Erasure of personal information

  • Correction of inaccurate data

  • Portability to receive a copy or transfer your data

  • Opt-out of data selling, sharing, or targeted advertising

  • Restriction or objection to processing

  • Withdrawal of consent, where applicable

  • Appeal against a refusal of request

  • Email preferences, to unsubscribe from marketing emails (transactional emails may still be sent)

You can exercise these rights via our Website or by contacting us. We will not discriminate against you for exercising your rights. We may require identity verification before acting on a request.

Complaints

If you have complaints regarding how we handle your data, contact us using the details below. If unsatisfied, you may lodge a complaint with your local data protection authority. EEA residents can find a list of supervisory authorities here.

International Users

Your data may be transferred, processed, or stored outside your country of residence. For data transfers outside Europe, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or equivalent UK mechanisms, unless the destination country is recognised as providing adequate protection.

Contact

For questions or to exercise your rights, contact us at:

Email: info@heywhitening.com
Postal address: Rua do Passal 7, São Romão do Neiva, PT-16, 4935-537, Portugal

Unless otherwise stated, we act as the data controller of your personal information for purposes of applicable data protection law.