Privacy Policy

Last updated: 1st January 2026

Introduction

This Privacy Policy explains how zandrovika.top S.A. ("we", "us", or "our") collects, uses, and protects your personal information when you visit our website zandrovika.top or use our beauty brand marketing analytics services. We are committed to protecting your privacy and ensuring transparency about our data practices.

Data Controller Information

The data controller responsible for your personal information is:

zandrovika.top S.A.
Avenida Almirante Reis 114
4071-134 Porto, Portugal
Registration Number: 253685741
VAT Number: PT257946135
Email: [email protected]
Phone: +351 221 103 208

Data Collection

We collect personal data that you provide to us voluntarily and information that is automatically collected when you use our website. The data we collect includes:

Information You Provide

• Contact information (name, email address, phone number)
• Company information (business name, industry, role)
• Communication preferences and marketing consent
• Messages and enquiries sent through our contact forms
• Service preferences and analytics requirements

Information Collected Automatically

• Website usage data and browsing behaviour
• Device information (IP address, browser type, operating system)
• Cookies and similar tracking technologies
• Referral sources and page interactions

How We Use Your Information

We use the personal data we collect for the following purposes, based on legitimate business interests and your consent where required:

• Providing and improving our beauty marketing analytics services
• Responding to your enquiries and providing customer support
• Sending you marketing communications about our services (with your consent)
• Analysing website performance and user experience
• Complying with legal obligations and protecting our business interests
• Developing new services and improving existing offerings

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: For marketing communications and optional cookies
• Legitimate interests: For website analytics, service improvement, and business communications
• Contract performance: For providing our analytics services to clients
• Legal compliance: For meeting regulatory requirements

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Sharing and Third Parties

We may share your personal information with the following categories of third parties:

• Service providers who assist us in delivering our services (analytics platforms, email services)
• Legal authorities when required by law or to protect our rights
• Professional advisors (lawyers, accountants, auditors)
• Potential buyers in case of business sale or merger

We do not sell your personal data to third parties for their own marketing purposes.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions from the European Commission.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy. Specific retention periods include:

• Contact enquiries: 3 years from last contact
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics data: 26 months (Google Analytics default)
• Client service data: Duration of contract plus 7 years for legal compliance

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal data in certain circumstances
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for marketing communications or cookies

To exercise any of these rights, please contact us at [email protected] or +351 221 103 208.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

Privacy Contact:
Email: [email protected]
Phone: +351 221 103 208
Address: Avenida Almirante Reis 114, 4071-134 Porto, Portugal

Supervisory Authority

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados) or your local supervisory authority.