Privacy Policy

1. General Information

Beloaroma Perfumaria e Cosmeticos Ltda, registered under Tax ID No. 05.836.301/0001-73, located at Av Emb Abelardo Bueno, 3000 - AP T 105 BL C 5, Barra Olímpica, Rio de Janeiro - RJ, ZIP 22775-040, is committed to protecting the personal data of its clients and website visitors, in compliance with the Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018).

This Privacy Policy describes how we collect, use, store, and protect your personal information in the context of perfume and cosmetics retail.

2. Data Collected

We may collect the following information:

• Identification data: Full name, Tax ID (CPF), date of birth
• Contact data: Email, phone number, address
• Purchase data: Order history, product preferences, beauty profile
• Financial data: Payment information, billing details
• Preference data: Fragrance preferences, skin type, beauty concerns
• Loyalty program data: Points, rewards, purchase history
• Skin sensitivity data: Allergies, product sensitivities (with consent)
• Browsing data: IP address, browser type, pages visited

3. Purpose of Data Processing

The collected data is used to:

• Process perfume and cosmetics purchases
• Provide personalized product recommendations
• Manage customer accounts and preferences
• Process payments and issue invoices
• Ensure product safety and suitability
• Manage loyalty programs and rewards
• Send order confirmations and updates
• Provide customer service and beauty advice
• Communicate new products and promotions
• Comply with legal and fiscal obligations
• Improve our products and services

4. Legal Basis for Processing

Data processing is performed based on:

• Consent: When you expressly authorize the use of your data, especially for skin sensitivity information
• Contract execution: To fulfill product sales and delivery contracts
• Legal obligation: To comply with tax laws and product safety regulations
• Legitimate interest: For personalized recommendations and customer communication

5. Data Sharing

Beloaroma does not sell or commercialize personal data. We may share data only with:

• Product suppliers: For inventory management (aggregated data only)
• Payment processors: For transaction processing
• Delivery services: For product shipping
• Accounting services: For fiscal compliance
• Loyalty program partners: For rewards and benefits
• Beauty consultants: For personalized recommendations (with consent)
• Health authorities: If required for product safety compliance
• Legal authorities: When required by law or court order

6. Data Security

We implement technical and organizational measures to protect your data:

• Secure payment processing systems
• Protected customer information storage
• Access controls to sensitive beauty profile data
• Regular security monitoring
• Employee training on data protection and confidentiality
• Strict confidentiality procedures
• Regular backups

7. Your Rights as Data Subject

Under LGPD, you have the following rights:

• Confirmation and access: Confirm the existence of processing and access your data
• Correction: Request correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion: Request removal of unnecessary data
• Portability: Request data portability
• Deletion: Request deletion of data processed with consent
• Information: Obtain information about data sharing
• Revocation: Revoke consent at any time
• Opposition: Object to the processing performed

8. Cookies and Similar Technologies

We use cookies to improve your browsing experience and remember your preferences. You can configure your browser to refuse cookies.

9. Data Retention

We retain your data for the time necessary to:

• Fulfill the purposes described in this policy
• Duration of customer relationship
• Purchase history: for personalized recommendations and product safety
• Financial records: for fiscal purposes (generally 5 years)
• Loyalty program records: while membership is active
• Beauty profile data: until consent is revoked
• Legal prescription periods
• Exercise of legal rights

After these periods, data will be securely deleted or anonymized.

10. International Data Transfer

Your data is stored and processed in Brazil. We do not perform international data transfers.

11. Minors

Our services are intended for individuals over 18 years of age. We collect data from minors only with parental or guardian consent.

12. Changes to This Policy

This Policy may be updated periodically. Significant changes will be communicated by email or in-store notice.

13. Data Protection Officer (DPO)

For data protection inquiries, please contact us using the information below.

14. Contact

To exercise your rights or clarify questions:

We will respond to your requests within 15 calendar days, extendable by another 15 days with justification.

15. Applicable Law and Jurisdiction

This Policy is governed by the laws of the Federative Republic of Brazil, especially Law No. 13.709/2018 (LGPD). The jurisdiction of Rio de Janeiro/RJ is elected to resolve any disputes.

Last updated: December 2025