Privacy Policy
Last updated: September 2026
At Essência da Luz, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect when you visit our website, contact us, subscribe to our newsletter or place an order, how we use that information, and what rights you have.
1. Who is responsible for your data?
The data controller responsible for this website is:
Waibel e Waibel Lda.
Essência da Luz
Santo Estevão cp607, 8300-047 Silves, Portugal
NIF: 516234374
Email: info@essenciadaluz.pt
2. What personal data do we collect?
Depending on how you use our website, we may collect:
-
your name, email address, telephone number and billing or delivery address;
-
information required to process and deliver your order;
-
information you provide when contacting us through our contact form, email or chat;
-
your email address and newsletter preferences if you subscribe to our newsletter;
-
payment and transaction information. Payment details are processed by the respective payment service providers and are not generally stored by us in full;
-
technical information such as IP address, browser and device information and information about how you interact with our website, where permitted and depending on your cookie choices.
3. Why do we process your personal data?
We process personal data where necessary:
-
to process, fulfil and deliver your orders and handle returns or customer service requests;
-
to process payments;
-
to respond to enquiries;
-
to send newsletters and marketing communications where you have given your consent;
-
to operate, secure and improve our website and online store;
-
to prevent fraud and misuse;
-
to comply with accounting, tax and other legal obligations.
The legal bases for these activities are, depending on the circumstances, the performance of a contract or steps taken before entering into a contract, compliance with legal obligations, our legitimate interests in operating and protecting our business, and your consent where consent is required.
You may withdraw consent at any time with effect for the future.
4. Online store and website provider
Our website and online store are hosted and operated using services provided by Wix.com. Wix may process personal data on our behalf in connection with hosting, website functionality, orders, forms, communications and other services used on this website.
Data may be processed on servers located outside the European Economic Area. Where personal data is transferred internationally, appropriate safeguards are used in accordance with applicable data protection law.
5. Payments
We currently offer payment methods including credit and debit cards through Wix Payments, as well as Apple Pay, Google Pay and PayPal. Manual payment methods may also be offered.
When you choose a payment method, information necessary to process the transaction may be transmitted to the relevant payment provider. Those providers may process certain information as independent data controllers in accordance with their own privacy policies.
We do not receive or store your complete credit or debit card details.
6. Delivery of orders
To fulfil your order, we may provide the information necessary for delivery – such as your name, delivery address, telephone number or email address – to the postal, courier or logistics provider handling your shipment.
Only information necessary to arrange and complete delivery is shared for this purpose.
7. Contact forms and chat
If you contact us through our website, email, contact form or chat, we process the information you provide in order to respond to your enquiry.
We retain correspondence only for as long as reasonably necessary for the purpose for which it was provided and, where applicable, to meet legal or contractual requirements.
8. Newsletter
If you subscribe to our newsletter, we use your email address to send you news, product information and other communications from Essência da Luz.
Newsletter communications are based on your consent. You can unsubscribe at any time by using the unsubscribe link included in our emails or by contacting us at info@essenciadaluz.pt.
Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.
9. Instagram and social media content
Our website may display content or links relating to Instagram or other social media services. Depending on the integration and your cookie choices, these services may receive technical information when content is loaded or when you interact with it.
Where consent is legally required, such services will only be activated after the appropriate consent has been given.
10. Cookies and analytics
Our website uses cookies and similar technologies. Some are strictly necessary for the website and online store to function. Others may be used for functionality, analytics or marketing and are activated only where permitted by law and, where required, after you have given your consent.
We use a consent-management solution to allow visitors to manage their cookie preferences.
For more information, please see our Cookie Policy.
11. How long do we keep your data?
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.
Certain information relating to orders, invoices, payments and business transactions must be retained for longer periods where required by Portuguese tax, accounting or other applicable law.
Data processed solely on the basis of consent is retained until consent is withdrawn or the data is no longer required for the relevant purpose, subject to applicable legal requirements.
12. Who may receive your personal data?
Where necessary, personal data may be shared with service providers involved in operating our business, including:
-
website and e-commerce providers;
-
payment providers;
-
delivery and logistics providers;
-
IT and technical service providers;
-
email and communication service providers;
-
professional advisers and public authorities where required by law.
We do not sell your personal data.
13. Your rights
Under the General Data Protection Regulation (GDPR), you may have the right to:
-
access your personal data;
-
request correction of inaccurate data;
-
request deletion of your data;
-
request restriction of processing;
-
object to certain processing;
-
receive certain data in a portable format;
-
withdraw consent at any time where processing is based on consent.
To exercise your rights, contact us at info@essenciadaluz.pt.
You also have the right to lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD).
14. Security
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure or unauthorised access. However, no method of transmission or storage on the internet can guarantee absolute security.
15. Changes to this Privacy Policy
We may update this Privacy Policy where our services, website or legal obligations change. The current version will always be available on this website, with the date of the latest update shown above.
