Privacy Policy

Identity and Contact Information of the Data Controller

Be Alkimya – Gifts of Light, headquartered in Lisbon, Portugal, is the entity responsible for processing your personal data in connection with the use of this website and the completion of transactions.

If you have any questions regarding the privacy of your data or wish to exercise your rights under the General Data Protection Regulation (GDPR), you can contact us at:

Email: ser.alkimya@alkimya.net

Morada: Lisbon, Portugal

We are committed to ensuring that your personal data is handled securely and transparently, always in compliance with applicable laws.

2. Personal Data Collected and Purpose

Be Alkimya – Gifts of Light collects and processes the following types of personal data to provide its services efficiently and in compliance with the General Data Protection Regulation (GDPR):

  • Types of Data Collected

* Basic Data:

Name, email, address, and phone number, collected to process orders, deliver products, and communicate information related to transactions.

* Financial Data:

Payment data is securely transmitted through the Stripe payment gateway, used exclusively to process transactions and never stored directly by the store.

* Login Data:

Username and password (in case of account creation), collected to manage access to store features such as order history.

* Browsing Data:

Cookies and information about website behavior (such as IP address, device, and pages visited), used to improve browsing experience and personalize content.

* Contact Forms and Newsletter Subscriptions:

Data voluntarily provided, such as name and email, to respond to contact requests and send newsletters, promotions, or communications about products (with the user’s prior consent).

3. Purpose of Data Processing

The personal data collected is used for:

. Processamento de encomendas: Garantir o correcto processamento e envio dos produtos adquiridos.

. Order processing: Ensuring the correct handling and delivery of purchased products.

. Customer communication: Responding to inquiries, contact requests, or providing updates on order status.

. Marketing and newsletter sending: Providing promotions, news, or relevant information (subject to prior consent).

. Browsing analysis: Improving website performance and personalizing the user experience through the use of cookies.

. Compliance with legal obligations: Issuing invoices and fulfilling tax and regulatory requirements.

The legal basis for data processing may vary depending on the purpose:

. Contract Performance: For order processing and account management.

. Consent: For sending newsletters or using non-essential cookies.

. Legitimate Interest: To improve services and ensure website security.

. Compliance with Legal Obligations: For tax and accounting purposes.

4. Legal Basis for Data Processing

The processing of your personal data by Be Alkimya – Gifts of Light is carried out in accordance with the General Data Protection Regulation (GDPR), based on the following legal grounds:

1. Performance of Contract

The data provided, such as name, email, address, and payment information, are essential to:

  • Process and deliver orders.
  • Manage user accounts.
  • Communicate updates related to transactions.

Without this data, it will not be possible to complete transactions or fulfill the requested services.

2. Consent

We collect and process personal data with your explicit consent in the following cases:

  • Sending newsletters, promotions, and other marketing communications.
  • Using non-essential cookies for analytical or advertising purposes.

You may withdraw your consent at any time using available options, such as the “unsubscribe” link in newsletters or the cookie management panel on the website.

3. Legitimate Interest

We process your data based on our legitimate interest to:

Personalize services and content based on browsing behavior.

Improve the user experience on the website.

Ensure security and protect against fraud or unauthorized access.

4. Compliance with Legal Obligations

We are legally required to process and store certain data for:

Retaining transaction records for the period established by applicable Portuguese law (currently between 6 and 10 years).

Issuing invoices and complying with tax obligations.

5. Data Sharing with Third Parties

To provide our services efficiently, Be-Alkimya – Gifts of Light shares certain personal data with third parties, always in compliance with the General Data Protection Regulation (GDPR).

1. Third Parties with Whom We Share Data

  • Payment Gateways:

We use services like Stripe to securely process payments. The data shared includes name, address, and transaction amount.

  • Shipping and Delivery Services:

To ensure the delivery of your orders, we share your name, address, and phone number with shipping companies.

  • Analytics Tools:

We use analytics platforms to understand website browsing behavior and improve our services. This data is aggregated and does not directly identify users.

2. International Data Transfers

Some of the third parties we work with are located outside the European Economic Area (EEA). We ensure that all data transferred outside the EEA is protected by appropriate security measures, such as:

  • Assurance that providers comply with standards equivalent to the GDPR.
  • Adoption of Standard Contractual Clauses approved by the European Commission.

3. Relationship with Third Parties

The third parties with whom we share data act as subcontractors and process information only on our behalf and according to our instructions. They are bound by confidentiality agreements and are obligated to comply with the GDPR or other applicable data protection regulations.

6. Data Retention

Be-Alkimya – Gifts of Light retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, respecting the retention periods required by applicable law.

. Retention Periods by Data Type

  • Order Data (name, address, email): Retained for a period of 10 years, as required by tax and accounting legislation in Portugal.
  • Financial Data: Retained only until the transaction is completed or for the time necessary to comply with legal obligations.
  • User Account Data: Retained while the account is active. If the user requests account deletion, the data will be erased unless it is necessary to retain them for legal or tax reasons.
  • Marketing Data (such as emails for newsletters): Retained while the user’s consent is active. The user can withdraw consent at any time, and the data will be deleted immediately after such a request.
  • Browsing Data (cookies): Retained according to the policies of the analytics platform used, such as Google Analytics, which by default stores data for 26 months. Cookies can be managed or deleted by the user through their browser settings.

. Data Deletion

After the retention period has expired, personal data will be securely deleted or anonymized for use in statistical analyses, ensuring that no identifiable information is retained.

7. Data Subject Rights

Be-Alkimya – Gifts of Light We guarantee users the exercise of their rights in accordance with the General Data Protection Regulation (GDPR). These rights ensure transparency and control over their personal data.

Your Rights Include:

  • Right of Access: Request a copy of your personal data being processed and information related to its use.
  • Right to Rectification: Correct or update personal data that is inaccurate or incomplete.
  • Right to Erasure (“Right to be Forgotten”): Request the deletion of your personal data, except in cases where retention is required by legal obligations.
  • Right to Restrict Processing: Restrict the processing of your data in certain circumstances, such as when you contest its accuracy or the legality of processing.
  • Right to Object: Object to the processing of your data for certain purposes, such as direct marketing or legitimate interests.
  • Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format, or request direct transfer to another data controller.
  • Right to Withdraw Consent: Revoke previously given consent for data processing without affecting the legality of processing based on consent before its withdrawal.
  • Right to Lodge a Complaint: File a complaint with the National Data Protection Commission (CNPD) if you believe your rights are being violated.

Exercise of Your Rights

You may exercise your rights at any time by contacting us through:

Email: ser.alkimya@alkimya.net

Address: Lisbon, Portugal

We will respond to your request within 30 days, as required by law.

8. Data Safety

Be-Alkimya – Gifts of Light is committed to protecting your personal data by implementing appropriate technical and organizational measures to ensure its security and to prevent unauthorized access, loss, alteration, or improper disclosure.

Implemented Security Measures

  • Encryption: We use SSL (Secure Socket Layer) encryption to protect the transmission of sensitive data, such as payment information and personal details, during website navigation.
  • Restricted Access: Only authorized personnel with a legitimate need have access to your data, under strict confidentiality agreements.
  • Firewalls and Protection Systems: The website is protected by firewalls and other security tools to prevent malicious attacks or unauthorized access.
  • Secure Storage: Personal data is stored on secure servers hosted by providers compliant with applicable data protection regulations.
  • Audits and Updates: We conduct regular audits and update our systems to ensure that the latest security practices are applied.

Limitations and Liability

Although we implement all reasonable measures to protect your data, no system is completely foolproof. If you identify a possible security breach related to your data, please contact us immediately at:

Email: ser.alkimya@alkimya.net

Your security is a priority, and we will take all necessary measures to resolve any situation that may compromise your personal data.

9. Use of Cookies and Similar Technologies

Be-Alkimya – Gifts of Light uses cookies and similar technologies to enhance the user experience on our website, personalize content, analyze traffic, and provide additional functionalities.

What are Cookies?

Cookies are small text files stored on your device (computer, tablet, or smartphone) when you visit our website. These files help us recognize you on future visits and optimize the website’s functionality.

Types of Cookies we use

  • Essential Cookies: Necessary for the website to function, such as processing orders or enabling login. These cookies cannot be disabled.
  • Performance and Analytics Cookies: Collect information about site usage, such as pages visited or errors encountered, to help us improve your experience.
  • Functional Cookies: Allow personalization of the user experience, such as remembering preferences or login details.
  • Advertising Cookies: Used to display relevant ads based on the user’s interests.

Consent and Cookie Management

When you visit our website for the first time, we ask for your consent to use non-essential cookies through a cookie banner.

You can change or withdraw your consent at any time using the cookie management panel on our website.

You can also manage cookies directly in your browser settings by disabling or deleting already stored cookies. However, this may affect the functionality of the site.

Similar Technologies

In addition to cookies, we may use other similar technologies, such as pixel tags or beacons, to analyze user behavior or evaluate the performance of marketing campaigns.

Third-Party Cookies

We work with third parties, such as Google Analytics, to analyze traffic and improve our services. These third parties may also store cookies on your device. For more information, please refer to the privacy policies of the platforms used.

10. Changes to the Privacy Policy

Be-Alkimya – Gifts of Light reserves the right to update or modify this Privacy Policy at any time, in accordance with legal or operational changes. Any changes will be posted on this page, accompanied by the date of the latest update.

We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal data.

Last Updated: August 12, 2025

If significant changes are made that affect your rights, we will notify you through appropriate channels, such as email or notices on the website.

Shopping Cart
Scroll to Top