Privacy Policy

Last updated: 15th January 2026

Data Controller Information

This Privacy Policy explains how varkonelix.top S.A. ("we," "us," or "our") collects, uses, and protects your personal information when you use our website varkonelix.top and our beauty product recommendation services.

Data Controller: varkonelix.top S.A.
Registration Number: 253614978
VAT Number: PT257496831
Address: Avenida dos Aliados 217, 4038-753 Porto, Portugal
Contact: [email protected]

Data We Collect

We collect various types of personal data to provide our beauty product recommendation services effectively. The data we collect includes information you provide directly to us and information we collect automatically when you use our services.

When you visit our website or use our services, we may collect the following types of personal information:

  • Contact Information: Name, email address, phone number, and postal address when you contact us or register for our services
  • Beauty Profile Data: Skin type, beauty preferences, product usage history, and beauty goals you provide for personalised recommendations
  • Technical Information: IP address, browser type, device information, and operating system details
  • Website Usage Data: Pages visited, time spent on site, click patterns, and navigation behaviour
  • Communication Records: Records of correspondence and communications with our team
  • Marketing Preferences: Your preferences regarding marketing communications and promotional materials

How We Use Your Information

We use the personal data we collect for various purposes related to providing and improving our beauty product recommendation services. How we use your information depends on the type of data and the legal basis for processing.

We use your personal data for the following purposes:

  • Service Provision: To provide personalised beauty product recommendations and consultations based on your preferences and requirements
  • Communication: To respond to your enquiries, provide customer support, and send service-related notifications
  • Service Improvement: To analyse usage patterns and improve our recommendation algorithms and user experience
  • Marketing: To send you promotional materials and updates about our services, where you have consented to receive such communications
  • Legal Compliance: To comply with applicable laws, regulations, and legal obligations
  • Security: To protect our website, services, and users from fraud, abuse, and security threats

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

Our website uses various types of cookies and similar technologies:

  • Necessary Cookies: Essential for website functionality and cannot be disabled
  • Analytics Cookies: Help us understand how visitors interact with our website
  • Functional Cookies: Remember your preferences and personalise your experience
  • Marketing Cookies: Used for advertising and remarketing purposes

For detailed information about our cookie usage, please refer to our Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

  • Consent: Where you have given clear consent for specific processing activities
  • Contract: Where processing is necessary for the performance of a contract with you
  • Legitimate Interests: Where we have legitimate business interests that do not override your privacy rights
  • Legal Obligation: Where processing is required by law

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information in the following circumstances:

  • Service Providers: With trusted third-party service providers who assist us in operating our website and services
  • Legal Requirements: When required by law, court order, or legal process
  • Business Transfers: In connection with a merger, acquisition, or sale of business assets
  • Consent: With your explicit consent for specific purposes

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. Our data retention periods vary depending on the type of information and the purpose for which it was collected.

Generally, we retain:

  • Contact Information: Until you request deletion or withdraw consent
  • Beauty Profile Data: For the duration of our service relationship and up to 3 years after account closure
  • Website Usage Data: Up to 26 months for analytics purposes
  • Communication Records: Up to 7 years for business and legal purposes

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data:

  • Right of Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Request transfer of your data to another service provider
  • Right to Object: Object to processing based on legitimate interests or for marketing purposes
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados) if you believe your personal data has been processed in violation of applicable data protection laws.