At beleza, your privacy is important to us. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws in Europe. By using our website, you agree to the practices described in this Privacy Policy. 1. Who We Are beleza is an online platform based in Europe that sells external software licenses. We are the data controller of your personal data under GDPR. 2. What Personal Data We Collect We collect the following types of personal data when you use our services: Account Information: name, email address, and password Contact Information: billing address, phone number (if provided) Payment Information: payment method and transaction details (processed securely by third-party payment providers — we do not store full credit card details) Order Information: products purchased, license keys delivered, download logs Device & Usage Data: IP address, browser type, operating system, referring URLs, and usage activity via cookies and analytics tools (e.g., Google Analytics) Support Requests: messages or inquiries submitted to our support channels 3. How We Use Your Data We process your data for the following purposes, under legal bases defined in GDPR: Purpose Legal Basis Fulfilling orders & software delivery Contractual necessity Creating and managing user accounts Contractual necessity Providing customer support Legitimate interest / contract Sending purchase confirmations Contractual necessity Marketing & newsletters (opt-in only) Consent Improving website functionality Legitimate interest Compliance with legal obligations Legal obligation 4. Cookies & Tracking Technologies We use cookies to: Enable essential website functionality Understand how visitors interact with our site (via tools like Google Analytics) Improve performance and user experience You can manage cookie preferences through your browser settings or cookie consent banner on our site. For full details, see our Cookie Policy. 5. How We Share Your Data We only share your data with trusted third parties when necessary: Payment processors (e.g., Stripe, PayPal) Email service providers (e.g., Mailchimp, SendGrid) Analytics providers (e.g., Google Analytics) Software vendors (for license verification or delivery, if required) Legal authorities (only if required by law or legal process) We do not sell your personal data to anyone. 6. International Transfers Some of our service providers are located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, such as: Standard Contractual Clauses (SCCs) approved by the European Commission Transfers to countries deemed to have adequate data protection by the EU 7. How Long We Keep Your Data We retain your personal data only as long as necessary to: Fulfill the purposes described above Comply with legal or tax obligations Resolve disputes and enforce agreements You can request deletion of your account and data at any time (see Section 9). 8. Data Security We implement appropriate technical and organizational measures to protect your data, including: SSL encryption for all data transfers Secure servers and firewall protection Limited access to personal data on a need-to-know basis 9. Your Rights Under GDPR As an EU resident, you have the following rights: Access – Request a copy of your personal data Rectification – Correct any inaccurate or incomplete data Erasure – Request deletion of your personal data (“right to be forgotten”) Restriction – Limit how we process your data Portability – Receive your data in a portable format Objection – Object to certain types of processing (e.g., marketing) Withdraw Consent – At any time, for processing based on consent To exercise your rights, email us at [email protected]. We will respond within 30 days. 10. Children's Privacy beleza does not knowingly collect data from children under the age of 16. If we learn that we have unintentionally collected personal data from a child, we will delete it immediately. 11. Updates to This Privacy Policy We may update this Privacy Policy from time to time. All changes will be posted on this page with an updated effective date. If we make significant changes, we’ll notify you by email or a notice on the site. 12. Supervisory Authority If you believe your data has been handled unlawfully, you have the right to lodge a complaint with your local Data Protection Authority (DPA). A full list of EU DPAs is available here: https://edpb.europa.eu/about-edpb/board/members_en