Privacy Policy

Last updated: 9 September 2026

At Louise Gleam Beauty, we respect your privacy and are committed to protecting your personal data with transparency and care.

This Privacy Policy explains how we collect, use, store, share and protect your personal information when you visit our website, create an account, contact us, subscribe to marketing communications or place an order.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable European Union and Portuguese data protection laws.

1. Data Controller

The data controller responsible for personal data processed through this website is:

Louise Gleam Beauty
Operated by: Louise Pereira
Country: Portugal
Email: contact@louisegleambeauty.com

Louise Gleam Beauty determines the purposes and means of processing personal data collected through this website, except where another service provider acts as an independent controller for its own processing activities.

2. Personal Data We Collect

2.1. Information you provide directly

Depending on how you interact with our website, we may collect:

  • Full name
  • Email address
  • Telephone number
  • Billing address
  • Shipping address
  • Customer account information
  • Order and purchase history
  • Information provided when contacting customer support
  • Information necessary to manage returns, refunds or delivery incidents
2.2. Payment information

Payments are processed through secure third-party payment providers, such as Stripe, and other payment methods that may be made available at checkout.

Where payment information is entered directly into the secure environment of a payment provider, Louise Gleam Beauty does not store your complete payment card details.

Payment providers may process payment and transaction information in accordance with their own privacy policies and applicable legal and regulatory obligations.

2.3. Information collected automatically

When you visit or interact with our website, certain technical information may be collected automatically, including:

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Pages visited
  • Website interactions
  • Approximate location derived from technical information
  • Cookies and similar online identifiers
  • Security, diagnostic and technical logs
2.4. Information collected through third-party tools

Where these services are enabled and subject to your consent where required, information may also be collected through services such as:

  • Google Analytics
  • Google Ads
  • Meta / Facebook advertising technologies
  • Payment service providers such as Stripe
  • Website hosting, security and technical service providers

3. Purposes and Legal Bases for Processing

3.1. Performance of a contract

We process personal data when necessary to enter into or fulfil a contract with you, including to:

  • Process your order
  • Arrange payment
  • Prepare and fulfil your purchase
  • Arrange shipping and delivery
  • Provide order tracking
  • Communicate about the status of your order
  • Manage returns and refunds
  • Resolve delivery or product-related incidents
  • Operate your customer account
  • Provide customer support relating to your purchase
3.2. Consent

Where required by law, we rely on your consent for activities such as:

  • Email newsletters
  • Promotional communications
  • Non-essential cookies
  • Analytics cookies and technologies
  • Advertising and marketing cookies
  • Personalised advertising technologies

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

3.3. Legitimate interests

Where permitted by law and after considering your rights and interests, we may process personal data where necessary for legitimate business purposes, including:

  • Protecting our website and customers against fraud, abuse and security threats
  • Maintaining the security and functionality of our website
  • Diagnosing technical problems
  • Improving our services and internal operations
  • Maintaining appropriate business records
  • Establishing, exercising or defending legal claims
3.4. Legal obligations

We may process and retain personal information where necessary to comply with legal obligations, including:

  • Tax obligations
  • Accounting requirements
  • Invoicing obligations
  • Consumer protection requirements
  • Regulatory obligations
  • Requests from competent public authorities where legally required

4. Sharing Personal Data with Third Parties

We only share personal data where reasonably necessary to operate Louise Gleam Beauty, fulfil your order, process payments, provide requested services, comply with legal obligations or protect our legitimate interests.

We aim to share only the information necessary for the relevant purpose.

4.1. Dropshipping, fulfilment and logistics partners

Louise Gleam Beauty works with third-party suppliers and logistics providers to fulfil certain customer orders.

For orders fulfilled through our dropshipping service, information necessary to prepare, process and deliver your order may be shared with:

BTSWholesaler
A registered trademark of Leslat & Cartago Asociados S.L.
Spain

The information shared may include, where necessary:

  • Your name
  • Shipping address
  • Telephone number
  • Email address where necessary for delivery or tracking
  • Products included in your order
  • Order information necessary for fulfilment
  • Information necessary to manage shipping, tracking or delivery incidents

BTSWholesaler and/or the relevant logistics provider may also communicate the information necessary for delivery to shipping carriers and transport companies involved in fulfilling your order.

4.2. Payment providers

Payment and transaction information may be shared with payment providers, financial institutions and related service providers where necessary to:

  • Process payments
  • Process refunds
  • Prevent fraudulent transactions
  • Manage chargebacks
  • Comply with financial and regulatory requirements

Our payment providers may include Stripe and other providers made available through our checkout.

4.3. Analytics and marketing providers

Where enabled and where the legally required consent has been obtained, we may use services such as:

  • Google Analytics
  • Google Ads
  • Meta / Facebook advertising technologies

These providers may receive technical information, cookie identifiers and information regarding your interactions with our website, subject to your cookie preferences and applicable law.

4.4. Hosting, website and security providers

We may use trusted service providers for services such as:

  • Website hosting
  • E-commerce infrastructure
  • Website maintenance
  • Cloud services
  • Email services
  • Firewalls and website security
  • Fraud prevention
  • Technical monitoring and diagnostics

These providers may process limited personal data where necessary to provide their services to Louise Gleam Beauty.

4.5. Legal and regulatory disclosures

We may disclose personal information where required by applicable law, court order or a competent public authority.

We may also disclose information where reasonably necessary to establish, exercise or defend legal claims or to protect Louise Gleam Beauty, our customers or other parties against fraud, abuse or unlawful activity.

5. International Data Transfers

Some of the technology, analytics, payment, advertising or other service providers used by Louise Gleam Beauty may process personal data outside the European Economic Area ("EEA").

Where personal data is transferred outside the EEA and applicable data protection law requires additional safeguards, we will rely on an appropriate legal transfer mechanism, which may include:

  • An adequacy decision issued by the European Commission
  • Standard Contractual Clauses approved by the European Commission
  • Other legally recognised safeguards under the GDPR

Where appropriate, additional technical, contractual or organisational safeguards may also be used to protect personal data transferred internationally.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies to provide essential functionality and, where applicable, to understand website performance and support marketing activities.

6.1. Types of cookies
  • Essential cookies – necessary for functions such as shopping cart, checkout, account access, security and website operation.
  • Functional cookies – may remember preferences and improve website functionality.
  • Analytics cookies – may help us understand how visitors use our website, for example through Google Analytics.
  • Marketing cookies – may be used for advertising measurement, audience creation and personalised marketing, including technologies from Meta and Google.
6.2. Cookie consent

Non-essential cookies and similar technologies are used only in accordance with applicable consent requirements.

Where consent is required, you can choose whether to accept or reject categories of non-essential cookies through the cookie consent tool available on our website.

You may change your preferences at any time through the cookie settings available on the website.

You may also manage cookies through your browser settings; however, disabling certain essential cookies may affect website functionality.

For more detailed information about the cookies used on our website, please see our Cookie Policy.

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to comply with applicable contractual, legal, tax, accounting, security and dispute-resolution requirements.

7.1. Orders, invoices and transaction records

Order-related personal information is retained for the period necessary to fulfil the purchase, provide after-sales support and manage potential disputes.

Certain invoicing, accounting, transaction and supporting records may be retained for up to 10 civil years where required by applicable Portuguese tax and accounting legislation.

7.2. Customer accounts

Customer account information may be retained while your account remains active. Certain information may continue to be retained afterwards where necessary to comply with legal obligations, resolve disputes or establish or defend legal claims.

7.3. Customer service communications

Customer support communications may be retained for as long as reasonably necessary to respond to the request, manage a complaint, resolve a dispute or protect our legitimate interests.

7.4. Marketing information

Information used for direct marketing is retained until you withdraw your consent, unsubscribe or object to receiving direct marketing communications.

We may retain limited information necessary to record and respect your opt-out preference.

7.5. Cookies and analytics data

Cookie and analytics data is retained according to the duration of the relevant cookie, your consent preferences and the settings of the applicable service provider.

Specific cookie retention periods may be described in our Cookie Policy or cookie consent tool.

8. Your Data Protection Rights

Subject to the conditions and limitations established by the GDPR, you may have the right to:

  • Request access to your personal data
  • Request correction of inaccurate or incomplete personal data
  • Request deletion of your personal data
  • Request restriction of processing
  • Object to certain types of processing
  • Receive certain personal data in a structured and portable format
  • Withdraw consent at any time where processing is based on consent
  • Object at any time to the use of your personal data for direct marketing
  • Lodge a complaint with a competent data protection authority

To exercise your privacy rights, please contact:

contact@louisegleambeauty.com

We may request information reasonably necessary to verify your identity before processing a data protection request.

We will respond to valid requests within the time limits established by applicable law, normally within one month, subject to any lawful extensions permitted under the GDPR.

9. Right to Lodge a Complaint

If you believe that your personal data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

You may contact the supervisory authority in your country of residence, place of work or the place where the alleged infringement occurred.

As Louise Gleam Beauty operates from Portugal, the Portuguese supervisory authority is:

Comissão Nacional de Proteção de Dados (CNPD)
Portugal

10. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against:

  • Unauthorised access
  • Unlawful processing
  • Accidental loss
  • Alteration
  • Improper disclosure
  • Destruction

Security measures may include secure connections, access restrictions, website security systems, monitoring, fraud-prevention tools and other appropriate technical and organisational safeguards.

Access to personal information is limited to persons and service providers that require the information for legitimate operational, contractual or legal purposes.

However, no internet transmission, website or electronic storage system can be guaranteed to be completely free from security risks.

11. Children's Privacy

Louise Gleam Beauty does not knowingly seek to collect personal data directly from children who are not legally able to enter into online transactions or provide valid consent under applicable law.

If we become aware that personal data has been collected from a child in circumstances that do not comply with applicable law, we will take reasonable steps to delete or otherwise appropriately handle that information.

12. External Links

Our website may contain links to websites, social media platforms or services operated by third parties.

Louise Gleam Beauty does not control and is not responsible for the privacy practices, content or security of third-party websites or services.

We recommend reviewing the privacy policy of any third-party website or service before providing personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy where necessary to reflect changes in our services, suppliers, technologies, business operations or legal obligations.

When this Privacy Policy is updated, the revised version will be published on this page and the "Last updated" date at the top of the policy will be changed accordingly.

We encourage you to review this Privacy Policy periodically.

14. Contact

For questions about this Privacy Policy, the processing of your personal data or the exercise of your privacy rights, please contact:

Louise Gleam Beauty
Operated by: Louise Pereira
Country: Portugal
Email: contact@louisegleambeauty.com

✨ Your trust matters to us.