Data Privacy Policy

Introduction

catcheuptq S.A. ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website catcheuptq.world or use our beauty brand loyalty analytics services.

This policy applies to all users of our website and clients of our analytics platform services. By using our website or services, you consent to the data practices described in this policy.

Data Controller Information

The data controller for your personal information is:

Data We Collect

We collect and process various types of personal data depending on how you interact with our services. The data collection occurs through different channels and serves specific business purposes related to our beauty brand analytics platform.

Information You Provide Directly

• Contact Information: Name, email address, phone number, company name, and job title when you contact us or request information
• Account Information: Username, password, and profile information when you create an account for our analytics platform
• Communication Data: Messages, enquiries, and correspondence you send to us through contact forms, email, or other communication channels
• Service Data: Information about your beauty brand, customer base, and business requirements when using our analytics services

Information Collected Automatically

• Technical Data: IP address, browser type, operating system, device information, and access times
• Usage Data: Pages visited, time spent on pages, click patterns, and navigation paths through our website
• Cookie Data: Information collected through cookies and similar tracking technologies as described in our Cookie Policy

How We Use Your Information

We use of your data is based on legitimate business interests and, where required, your explicit consent. Our primary purpose is to provide exceptional beauty brand analytics services whilst maintaining your privacy and data security.

Service Provision and Management

• Providing and maintaining our beauty brand loyalty analytics platform
• Processing and responding to your enquiries and service requests
• Managing your account and providing customer support
• Delivering personalised analytics insights and recommendations

Communication and Marketing

• Sending service-related notifications and updates
• Providing information about new features and services (with consent)
• Sending newsletters and industry insights (with consent)
• Responding to your communications and providing support

Business Operations and Improvement

• Analysing website usage to improve our services and user experience
• Conducting research and development for new analytics features
• Ensuring security and preventing fraud or misuse of our services
• Complying with legal obligations and regulatory requirements

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

Our website uses the following types of cookies:

• Necessary Cookies: Essential for website functionality and security
• Analytics Cookies: Google Analytics to understand website usage and performance
• Functional Cookies: To remember your preferences and settings
• Marketing Cookies: Google Ads for remarketing and personalised advertising

For detailed information about our cookie usage, please review our comprehensive Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy. We may share your information in the following circumstances:

Service Providers

We work with trusted third-party service providers who assist us in operating our website and delivering our services. These providers have access to personal information only as necessary to perform their functions and are contractually obligated to maintain confidentiality.

Legal Compliance

We may disclose your information when required by law, regulation, or legal process, or when necessary to protect our rights, property, or safety, or that of our users or the public.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy protections.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. Our data retention practices are designed to balance business needs with privacy rights.

Retention Periods

• Contact Enquiries: 3 years from last contact for business development purposes
• Client Account Data: Duration of service agreement plus 7 years for legal and tax compliance
• Website Analytics Data: 26 months as per Google Analytics default settings
• Marketing Communications: Until consent is withdrawn or 3 years of inactivity

When personal data is no longer needed, we securely delete or anonymise it in accordance with our data retention and disposal procedures.

Your Rights

Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have several rights regarding your personal data. We are committed to facilitating the exercise of these rights in a timely and transparent manner.

Your Privacy Rights Include

• Right of Access: Request copies of your personal data and information about how it is processed
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of how we process your personal data
• Right to Data Portability: Request transfer of your data to another service provider in a structured format
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within one month of receipt.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection and security
• Incident response and breach notification procedures

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to protecting your data using industry-standard practices.

International Data Transfers

As a company based in Portugal and operating within the European Union, we primarily process data within the EU/EEA. When we transfer personal data outside the EU/EEA, we ensure appropriate safeguards are in place, such as:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules where applicable
• Certification schemes and codes of conduct

Children's Privacy

Our services are not intended for children under the age of 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

We encourage you to review this privacy policy periodically to stay informed about how we protect your information.

Contact Information

If you have any questions, concerns, or requests regarding this privacy policy or our data processing practices, please contact us using the following information:

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados - CNPD) if you believe we have not handled your personal data in accordance with applicable law.

Governing Law

This privacy policy is governed by and construed in accordance with the laws of Portugal and the European Union. Any disputes relating to this policy shall be subject to the exclusive jurisdiction of the Portuguese courts.