Privacy Policy

Privacy Policy

Last updated: April 23, 2026

YukiLab Aromatherapy  manages this store and website, including the data, content, features, tools, products, and services to provide  the customer, with a curated shopping experience

We are a Portuguese company specialized in the manufacture and sale of natural cosmetics, perfumery, and personal hygiene products with a focus on aromatherapy.

Our contact details:

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our Website, subscribe to our newsletter, place an order, or contact us.

By using our Website, you consent to the practices described in this policy.

1. Information We Collect

We collect the following categories of personal data:

  • Identification and Contact Data: Name, email address, phone number, billing and shipping address.
  • Order and Payment Data: Details of products you purchase, payment information (processed securely by our payment service providers), order history.
  • Newsletter and Marketing Data: Email address when you subscribe to receive offers, discounts (e.g., 10% off your first order), or updates.
  • Technical and Usage Data: IP address, browser type, device information, pages visited, time spent on the site, and cookies or similar tracking technologies.
  • Other Information: Any data you voluntarily provide when contacting us or leaving reviews/testimonials.

We do not collect sensitive personal data (such as health data) unless you voluntarily provide it in a message or product inquiry. In that case, we process it only with your explicit consent.

2. How We Use Your Information

We use your personal data for the following purposes:

  • To process and deliver your orders (including payment processing and shipping).
  • To manage your newsletter subscription and send marketing communications (you can unsubscribe at any time).
  • To respond to your inquiries and provide customer support.
  • To improve our Website, analyze usage, and personalize your experience.
  • To comply with legal obligations (accounting, tax, consumer protection).
  • To prevent fraud and ensure the security of our Website.

3. Legal Basis for Processing (GDPR)

As we are established in Portugal (EU), we rely on the following legal bases:

  • Performance of a contract (processing orders).
  • Legitimate interest (improving our services, marketing to existing customers, fraud prevention).
  • Your consent (newsletter, certain cookies, voluntary information).
  • Legal obligation (tax and accounting requirements).

4. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Make the Website function properly (essential cookies).
  • Analyze traffic and improve user experience (analytics, e.g., Google Analytics if used).
  • Personalize content and show relevant offers (marketing cookies).

You can manage your cookie preferences through the cookie banner on our Website or via your browser settings. For more details, please see our Cookie Policy (we recommend creating a separate one if you use non-essential cookies).

5. Sharing Your Information

We may share your personal data with:

  • Service Providers: Third parties that help us operate the business, such as hosting providers, payment processors (e.g., Stripe, PayPal, or similar), shipping companies, email marketing platforms, and analytics services. These providers are bound by data processing agreements and GDPR obligations.
  • Legal Authorities: When required by law, court order, or to protect our rights.
  • Business Transfers: In case of merger, acquisition, or sale of assets.

We do not sell your personal data to third parties.

6. International Data Transfers

Your data is primarily processed in the European Union. If we transfer data outside the EU/EEA (for example, to certain service providers in the US), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We keep your personal data only as long as necessary for the purposes for which it was collected, or as required by law (e.g., tax records for 10 years in Portugal). After that, we securely delete or anonymize it.

8. Your Rights (GDPR)

As an EU resident, you have the following rights regarding your personal data:

  • Right to access, rectify, or erase your data.
  • Right to restrict or object to processing.
  • Right to data portability.
  • Right to withdraw consent at any time (where processing is based on consent).
  • Right to lodge a complaint with the Portuguese supervisory authority: Comissão Nacional de Proteção de Dados (CNPD) – www.cnpd.pt.

To exercise any of these rights, please contact us at: contact@yukilab.online

We will respond within one month (extendable in complex cases).

9. Children’s Privacy

Our Website is not directed at children under 16 years old. We do not knowingly collect personal data from children. If we become aware that we have collected such data, we will delete it immediately.

10. Security

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration. However, no system is completely secure.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will be changed. Significant changes will be notified on our Website or by email where appropriate.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us:

  • Email: contact@yukilab.online
  • Phone: +351 932 194 471
  • Postal address: R. Dr. Júlio de Matos 450, 4200-353 Porto, Portugal