Privacy Policy

Last updated: October 9, 2026

This Privacy Policy explains how the personal data of visitors to the website nathaliecharlot.pt and clients of the Nathalie Charlot Salon are processed, in compliance with the General Data Protection Regulation (GDPR) and applicable national legislation.

1. Data Controller

The data controller is Nathalie Charlot — Sole Proprietor, who conducts business under the name Nathalie Charlot Salon.

• Tax ID (NIF): 207011117.
• Address: Rua Cristóvão Pires Norte, Edifício Mira Parque, lojas 2 e 3, 8135-117 Almancil, Portugal.
• Email for privacy matters: salon@nathaliecharlot.pt.
• Telephone: +351 919 154 959 — call to the national mobile network.

2. Personal data processed

Depending on the interaction with the salon, the following may be processed:

• Identification and contact data: name, email address, and telephone number.
• Booking data: requested service, date and time, information necessary for the organization of the appointment, and respective history.
• Communications: content of requests and messages sent through the website, email, telephone, or WhatsApp.
• Service provision and billing data: services performed, payments, Tax ID (NIF), and other elements necessary for the issuance of tax documents.
• Technical data: IP address, browser, device, server requests, and logs necessary for website security.
• Usage data and preferences: interactions with the website, identifiers, and cookie choices, according to the technologies used and applicable consent.
• Promotional communications data: contacts and records of consent or objection, when there is a subscription or authorization for such mailings.

Data is normally provided by the data subject. Some technical data is generated by the use of the website.

We request only the necessary data. Please avoid including sensitive information or third-party data in forms or messages that are not relevant to the request.

3. Purposes and legal basis for processing

Data is processed for the following purposes:

• Responding to information requests and managing bookings: pre-contractual steps requested by the data subject or execution of the contract.
• Providing services and communicating about bookings: execution of the contract.
• Issuing invoices and complying with tax and accounting obligations: compliance with legal obligations.
• Managing complaints and defending rights: compliance with legal obligations or legitimate interest in conflict resolution and defense of rights.
• Sending promotional communications: consent, collected separately.
• Analyzing website usage or measuring advertising through cookies and non-essential technologies: prior consent, when required.
• Protecting the website and preventing abusive use: legitimate interest in the security of systems and communications, respecting the rights of data subjects and the rules applicable to the technologies used.

When processing is based on a legitimate interest, its necessity and the consequences for the rights and freedoms of the data subjects must be evaluated.

Messages necessary for the management of a booking or the provision of the service are distinct from promotional communications.

4. Forms and required data

Mandatory fields in forms are identified. The lack of necessary information may prevent the response to the request, the management of the booking, or the provision of the service.

Sending a contact or booking request does not imply consent for advertising.

Acknowledgment of this policy does not constitute a general authorization for any use of the data.

5. Promotional communications

When promotional communications are sent based on consent, this is requested separately and voluntarily.

You may withdraw consent or object to direct marketing at any time through the mechanism indicated in the messages or by sending a request to salon@nathaliecharlot.pt.

The withdrawal of consent does not affect the lawfulness of the processing previously carried out.

A minimum record of the objection may be kept to prevent new mailings and demonstrate compliance with the request.

6. Data recipients

Data may be made available, only to the extent necessary, to:

• Persons authorized to collaborate in the management of bookings and the provision of salon services.
• Providers of hosting, email, maintenance, and IT assistance.
• Providers of booking, communication, or messaging tools, when used.
• Accounting and legal support providers.
• Suppliers of analysis and advertising tools effectively used, according to the configuration and applicable consent.
• Authorities or other entities when there is a legal obligation or legitimate basis for the communication.

When Webfarus, operated by Memória D’Elite Unipessoal, Lda., has access to personal data to provide hosting, maintenance, or assistance on behalf of the salon, it acts as a processor in that context, according to the instructions of the data controller.

Providers who process data on behalf of the salon must be subject to the contractual conditions required by the GDPR.

Some platforms may act as independent controllers for certain processing activities. It is not assumed that all suppliers process data exclusively under the salon’s instructions.

Personal data is not sold or rented to third parties.

7. Contacts via WhatsApp and external services

If you choose to contact the salon via WhatsApp, that platform may process data according to its own terms and privacy policy.

The salon remains responsible for the use of the data received to respond to the request and manage the relationship with the client.

You may use email or telephone as alternative contact channels.

Visiting external websites through links provided on our website is also subject to the policies of those websites.

8. Cookies and similar technologies

The website uses SureCookie to present cookie options and allow the management of preferences.

Cookies and similar technologies may involve identifiers, IP addresses, and information about the interaction with the website.

Non-essential technologies that depend on consent can only be activated after the user’s choice for the respective purpose.

The identified cookies, purposes, providers, and durations are presented in the Cookie Policy, accessible through the banner and the link provided on the website.

You can review your choices through the following option:

Preferências de Cookies

9. International transfers

The use of certain providers may involve the processing of data outside the European Economic Area.

These transfers must be based on a valid mechanism provided for in the GDPR, such as an adequacy decision by the European Commission or appropriate safeguards, including standard contractual clauses and supplementary measures when necessary.

You may request information about the recipients, destinations, and safeguards applicable to your data, as well as a copy or indication of access to these safeguards, via salon@nathaliecharlot.pt.

10. Data retention

Data is retained according to the following criteria:

• Contact requests: during the management of the request and, after its closure, only as long as the requested follow-up or retention for the defense of rights is justified.
• Bookings and service provision: during the period necessary for the organization, execution, and follow-up of the service. Subsequent retention depends on a specific purpose and legal basis.
• Tax and accounting documents: for the applicable legal periods. This obligation does not imply retaining all booking data for the same period.
• Promotional communications: as long as consent is maintained, without prejudice to the limited retention of proof of consent and records of objection.
• Technical and security records: for the period necessary for the prevention, detection, and investigation of incidents.
• Cookies and associated data: according to the durations indicated in the inventory and the configurations applicable to the tools used.

After the applicable period, data is deleted or anonymized, unless there is a legal basis for its retention.

11. Security and confidentiality

Appropriate technical and organizational measures are adopted to protect data against unauthorized access, loss, alteration, or improper disclosure.

These measures must include limiting access to authorized persons, confidentiality duties, and procedures for incident prevention and response.

No system can guarantee absolute security. This circumstance does not waive the obligations of the data controller nor the rights of the data subjects.

12. Rights of data subjects

Under the legal terms and conditions, you may exercise the rights of:

• Access to your personal data.
• Rectification of inaccurate or incomplete data.
• Erasure of data.
• Restriction of processing.
• Portability, when applicable.
• Objection to processing based on legitimate interests.
• Withdrawal of consent, without affecting the lawfulness of previous processing.
• Not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or significantly affect you, except for legal exceptions.

Objection to processing for direct marketing may be exercised at any time.

To exercise your rights, contact salon@nathaliecharlot.pt. This is the preferred channel, without excluding other legally admissible means.

If there are reasonable doubts about identity, additional information strictly necessary for its confirmation may be requested.

A response is provided, as a rule, within one month. When legally admissible, the period may be extended by a further two months, with the extension and its reasons being communicated within the first month.

The exercise of rights is, as a rule, free of charge, without prejudice to legally provided exceptions.

13. Complaints to the CNPD

You may lodge a complaint with the National Data Protection Commission — CNPD, without the need to previously contact the salon.

Consult the contacts and forms at www.cnpd.pt/cidadaos/participacoes/.

14. Changes to the policy

This policy may be updated to reflect changes in processing or legislation.

The current version is published on this page with an indication of the update date. When necessary, relevant changes are communicated by other appropriate means.

15. Contacts

For privacy matters or the exercise of rights:

Nathalie Charlot — Sole Proprietor
Tax ID (NIF): 207011117
Rua Cristóvão Pires Norte, Edifício Mira Parque, lojas 2 e 3, 8135-117 Almancil, Portugal.
Email: salon@nathaliecharlot.pt.
Telephone: +351 919 154 959 — call to the national mobile network.