Privacy Policy

Last updated: September 4, 2026

Aroma em Movimento values the privacy of its customers and is committed to processing personal data in accordance with applicable legislation, including the General Data Protection Regulation (GDPR).

1. Data Controller

Email: lojaaromaemmovimento@gmail.com
Phone: 938 229 402

2. Personal Data Collected

Depending on your use of our store, we may collect data such as:

name;
email address;
phone number;
billing address;
delivery address;
data necessary for invoicing;
information related to orders;
information provided by the customer when contacting us.

Payment data is processed by the respective payment service providers and is not necessarily stored directly by Aroma em Movimento.

3. Purposes of Processing

Personal data may be used to:

process and deliver orders;
process payments;
issue invoices;
provide customer support;
respond to information requests;
manage returns and refunds;
comply with legal obligations;
prevent fraud and misuse of the store;
send marketing communications, when consent or another appropriate legal basis exists;
improve the website's operation and security.

4. Legal Basis

The processing of personal data may be based on:

performance of a contract;
compliance with legal obligations;
data subject's consent;
pursuit of legitimate interests of Aroma em Movimento, where applicable.

5. Data Retention

Personal data will only be retained for the period necessary to fulfill the purposes for which it was collected, as well as for the periods required by applicable legislation.

Data necessary for compliance with tax and legal obligations may be retained for the legally established periods.

6. Data Sharing

We may use external service providers for certain operations, including:

payment services;
shipping carriers;
e-commerce platforms;
hosting services;
technology services;
accounting;
communication and marketing tools, where applicable.

Where necessary, appropriate measures will be adopted to ensure the protection of personal data.

7. Data Subject Rights

Under the GDPR, the data subject may, where applicable, exercise rights such as:

access to their personal data;
rectification of inaccurate data;
erasure of data;
restriction of processing;
objection to processing;
data portability;
withdrawal of consent, when processing is based on consent.

To exercise your rights, please contact:

lojaaromaemmovimento@gmail.com

8. Security

Aroma em Movimento adopts appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, alteration, or improper disclosure.

However, no electronic transmission or storage system can be considered absolutely secure.

9. Cookies

The website may use cookies and similar technologies to ensure its operation, improve the user experience, analyze traffic, and, when authorized, display personalized content or advertising.

Cookies that are not strictly necessary will be used in accordance with applicable preferences and consents.

10. Contact

For any questions related to privacy and data protection: