Privacy Policy

Nalu Beach Club, Lda (also known as “Nalu Beach Club”, hereinafter: “we” and “us”), as the operator of the website www.nalubeachclub.com, is responsible for the personal data of users (hereinafter: “you”) of the website within the meaning of data protection laws and, in certain circumstances, the European General Data Protection Regulation (“GDPR”).

We recognize the importance of protecting privacy when it comes to personal and financial information. Therefore, we only collect, process, and use your personal data in accordance with this privacy statement and the applicable data protection laws, particularly the GDPR.

This privacy statement informs you about the personal data we collect, process, and use about you when you use our website or communicate with us via emails, texts, and other electronic messages.

Please read the following information carefully. We reserve the right to periodically change this privacy statement. Please check it regularly.

Our website is not intended for individuals under the age of 16. Persons under the age of 16 are not authorized to provide personal data on our website. We emphasize that we do not intentionally collect data from individuals under the age of 16. If you are under 16, please do not register on our website, make purchases, use any interactive features or public comments, or provide any information about yourself, including your name, address, phone number, email address, or username. If we learn that we have collected or received personal data from a person under 16 without parental consent verification, that data will be deleted. If you suspect we may have data from or about a person under the age of 16, please contact us via the email or postal address listed in the CONTACT section.

Types of Data We Collect

We collect certain individually identifiable data actively submitted by the user through the website and through cookies, flash cookies, web beacons, and other tracking technologies.

This information may contain personal data. Personal data, for the purposes of this privacy statement, includes all information relating to an identified or identifiable individual. Such personal data may include your full name, title, date of birth, email address(es), billing address(es), shipping address(es), phone number(s), account access password, credit card information, purchase history, and product interests. We use personal data mainly for the purposes for which you originally provided it (i.e., inquiries, purchase, and delivery of products, to provide the requested newsletter, etc.), to improve our products and services, for market research, personalized marketing, and customer profiling.

Website Usage Data

Personal data also includes information about your use of our website. In this context, we collect the following user data:

This data is collected via log files and cookies. More information about cookies is provided further below in this privacy policy.

We use this data to protect our legitimate interests:

The data will be deleted as soon as it is no longer necessary to fulfill the purpose for which it was collected.

Newsletter

Your email address will be used by us to send you marketing messages. You will only receive such messages if you have registered on our website to receive our newsletter.

In addition to your email address and the names provided, we also collect the following user information:

Your email and name are stored and used by us to send newsletters. They will not be shared with third parties. Other information is collected to prevent misuse of our services and the email address provided.

You can unsubscribe from these communications at any time by following the unsubscribe instructions in the newsletter or by emailing us at geral@nalubeachclub.com with your unsubscribe request.

Your personal data will be stored until you unsubscribe or revoke your consent.

The legal basis for processing is Article 6, Paragraph 1 lit. a of the GDPR.

Our newsletter contains a web beacon or tracking pixel. This is a one-pixel image stored on our website. We use this technology to analyze your usage behavior. This data is collected and evaluated in pseudonymous form and is not associated with your personal data.

You have the right to object to tracking at any time by clicking the link in each newsletter email or by notifying us of your objection via email or letter. This data will be deleted after you unsubscribe from the newsletter.

Transparency and Information Disclosure

We work with selected third parties who provide services to us. This includes website maintenance, customer communication, and other services. Personal data obtained via our website may only be accessed by these third parties on our behalf. These service providers are not authorized to use your personal data for any other purposes. Services provided by third parties include:

In connection with payment processing, we may also share personal data with financial institutions or other third parties. Your personal data will not be shared with third parties unless legally required to do so. This may be necessary for legal proceedings, or to protect our or third-party rights or legitimate interests.

Availability and Changes to the Privacy Policy

We reserve the right to periodically update our privacy policy. Updated policies will be published on our website. Therefore, we recommend reviewing this page regularly, especially each time you use the website.

If you are registered with us and wish to delete your registration and personal data from our database, click the unsubscribe link. Keep your personal information accurate, current, and complete by updating your account or emailing us at geral@nalubeachclub.com.

Data Security

We have taken appropriate measures to protect your data against accidental loss, unauthorized access, use, alteration, or disclosure.

We also advise caution when sharing information in public areas of our website. Information shared in public areas may be viewed by any website user.

Unfortunately, data transmission over the internet is not completely secure. Although we do our best to protect your data, we cannot guarantee the security of your personal data transmitted to our site. Data transmission is at your own risk. We are not responsible for circumvention of data protection settings or website security measures.

Cookies

When visiting our website, we collect data through the use of cookies. This includes your computer's IP address and/or internet service provider, access date and time, the URL of the referring websites, the computer technology used, and your movements and preferences on our site. We may also use cookies to collect information on future visits, recognize you as a previous visitor, and track your website activity. You can configure your browser to notify you of cookies or to reject cookies entirely, which may affect the use of some site features.

We reserve the right to use other technologies such as web tags, web beacons, and navigation data tools. These are mainly used to manage and improve our site and systems, protect them, understand visitor preferences, identify server issues, compile website usage statistics, access advertising networks, and personalize offers. Data collected by cookies and other tracking technologies may be combined with personal data by us.

Web Analytics Services

We use Google Analytics, a web analytics service of Alphabet, Inc., 251 Little Falls Drive, Wilmington, 19808, USA. Google Analytics may use cookies to analyze your use of the website. Information generated by the cookie is generally transmitted to and stored on a Google server in the USA. The IP address provided by your browser to Google will not be merged with other Alphabet, Inc. data.

Data sent by us and linked to cookies, user IDs (e.g., user IDs), or advertising IDs is automatically deleted when no longer needed for analysis. Data with expired retention periods is deleted automatically once per month.

For more information on terms of use and data protection, see: https://marketingplatform.google.com/about/analytics/terms/ or https://policies.google.com/privacy/.

You can prevent the installation of cookies by setting your browser software accordingly. Please note that full website functionality may not be guaranteed in that case.

Google Maps

We use the Google Maps API to display geographic information. By using Google Maps, Google processes information about your use of the maps and related functions. For more information about how Google handles personal data, please see their privacy policy: http://www.google.com/policies/privacy/.

Privacy

We take all precautions to protect the personal data collected on our website. We [and third parties contracted by us] store the information on servers located in Switzerland and the EU. Occasionally, we engage other companies to provide services on our behalf, such as processing event registrations. These companies only receive the information necessary to provide the service and are prohibited from using the information for other purposes.

When we request general demographic information, it is used for reporting purposes only; users remain anonymous. Phone numbers, email addresses, and mailing addresses are never shared with third parties for demographic reporting.

How Long Is Personal Data Retained?

We may not retain your personal data longer than necessary to fulfill the purposes for which it was collected, unless we are legally obligated to do so under applicable law.

The website may contain links to and from third-party websites. If you follow a link to one of these websites, please note that we are not responsible for the content or privacy practices of third parties. Make sure you review their privacy policies before submitting personal data to those sites.

Your Rights

You may access your personal data at any time and free of charge, as well as information about its origin, recipients or categories of recipients, and the purpose of storage. You may also request its correction and/or deletion and/or restriction of processing.

You also have the right to object to the processing of your data at any time, provided the processing is carried out to safeguard our legitimate interests. In this case, your data will only be processed if we can demonstrate compelling legitimate grounds for the processing that override your interests or if the processing serves to assert, exercise, or defend legal claims.

If the processing of your data is based on consent, you have the right to withdraw it at any time. In this case, we will stop processing your data unless otherwise permitted by law. The lawfulness of data processing that occurred before your withdrawal is not affected.

If you have provided us with personal data, we will provide it to you upon request in a machine-readable format for use by other providers.

Contact

To exercise your rights or if you have any questions, please contact us at geral@nalubeachclub.com or by mail at Nalu Beach Club, Av. da República, 2450-106 Nazaré, Portugal.