Privacy Policy

DIVAE Privacy Policy

Last updated: August 17, 2025

At DIVAE, your privacy is not just important — it’s a core value. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you interact with our online store (www.divaeofficial.com) and our services.

By using our website, you agree to the practices described in this Privacy Policy.

1. Who We Are

DIVAE is a premium cosmetics brand offering vegan, cruelty-free, and paraben-free products. We operate exclusively as an online store, with a local warehouse dedicated only to the preparation and shipment of orders.

For the purposes of data protection laws (including the GDPR), DIVAE is the Data Controller of your personal information.

📍 Company name: DIVAE Cosmetics Ltd.
📍 Registered address: Rua das Flores 125, 3º Esq, 1200-195 Lisbon, Portugal
📍 VAT: PT509384726
📩 Contact: support@divaeofficial.com

2. Information We Collect

We may collect the following categories of personal data:

  • Identity Data: name, email address, billing/shipping address, phone number.

  • Order Data: purchase history, payment confirmation, delivery details.

  • Payment Data: processed securely through third-party payment providers (we do not store card details).

  • Technical Data: IP address, browser type, device information, cookies, and analytics data.

  • Marketing Data: your preferences for receiving marketing communications, newsletter sign-ups, or participation in promotions.

3. How We Use Your Information

We use your information for the following purposes:

  1. To process and deliver your orders (payments, shipping, returns).

  2. To communicate with you (order confirmations, customer support, product updates).

  3. To improve our services and website (analytics, personalization).

  4. To comply with legal obligations (tax, fraud prevention, record keeping).

  5. For marketing purposes (only if you have given your explicit consent).

4. Legal Basis for Processing

Under the GDPR, we rely on the following legal bases:

  • Contractual necessity: to fulfill your order.

  • Consent: for newsletters, promotional emails, or optional surveys.

  • Legal obligation: to comply with tax and accounting rules.

  • Legitimate interests: to improve our services, prevent fraud, and ensure site security.

5. Sharing Your Information

We never sell your data. However, we may share it with:

  • Service providers (payment processors, delivery companies, IT support, email providers).

  • Legal authorities when required by law.

  • Business transfers (in case of mergers, acquisitions, or sale of assets).

All third parties are contractually obligated to handle your data securely and only for the intended purpose.

6. International Data Transfers

As we operate internationally, your information may be transferred outside the EU/EEA. In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention

We keep your personal data only as long as necessary:

  • Order-related data: kept for 6 years for tax and legal purposes.

  • Marketing data: kept until you withdraw your consent.

  • Technical data: typically kept for 12–24 months for analytics.

8. Your Rights

Under GDPR and other data protection laws, you have the right to:

  • Access your personal data.

  • Correct inaccuracies.

  • Request deletion ("right to be forgotten").

  • Restrict or object to processing.

  • Request data portability.

  • Withdraw consent at any time (for marketing).

  • File a complaint with your local data protection authority.

To exercise these rights, contact us at support@divaeofficial.com.

9. Cookies & Tracking

We use cookies and similar technologies to:

  • Enable essential website functions (shopping cart, checkout).

  • Improve performance and personalize your experience.

  • Provide analytics and measure marketing effectiveness.

You can manage or disable cookies through your browser settings.

👉 See our separate Cookie Policy for more detail.

10. Security of Your Data

We implement technical and organizational measures to protect your information, including:

  • SSL encryption on all transactions.

  • Secure servers with restricted access.

  • Regular monitoring for vulnerabilities.

No method of transmission over the Internet is 100% secure, but we take all reasonable precautions to protect your data.

11. Children’s Privacy

Our website and products are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the data immediately.

12. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

13. Contact Us

For any questions about this Privacy Policy or your personal data:

📍 DIVAE Cosmetics Ltd.
Rua das Flores 125, 3º Esq, 1200-195 Lisbon, Portugal
📩 support@divaeofficial.com