Privacy Policy

Introduction

aurexantia.top S.A. ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website aurexantia.top and use our services.

Data Controller

The data controller responsible for your personal information is aurexantia.top S.A., a company registered in Portugal with registration number 965874312, located at Rua dos Fanqueiros 123, Braga, 4757-140, Portugal.

Data Collection

We collect information that you provide directly to us and information that is automatically collected when you use our website. The data we collect may include:

• Personal identification information (name, email address, phone number)
• Communication preferences and correspondence with us
• Information about your business interests and requirements
• Website usage data, including pages visited and time spent on our site
• Technical information such as IP address, browser type, and device information
• Cookie and tracking technology information as described in our Cookie Policy

How We Use Your Information

We use the personal information we collect to provide, maintain, and improve our services. Specifically, we use your information to:

• Respond to your enquiries and provide customer support
• Deliver our coffee shop startup guidance services
• Send you service-related communications and updates
• Improve our website functionality and user experience
• Analyse website usage patterns to enhance our services
• Comply with legal obligations and protect our rights
• Prevent fraud and ensure the security of our services

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for us to process your personal data for specific purposes
• Contract: When processing is necessary for the performance of a contract with you
• Legitimate interests: When we have a legitimate business interest that does not override your privacy rights
• Legal obligation: When we need to comply with legal requirements

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With service providers who assist us in operating our website and delivering our services
• When required by law or to respond to legal process
• To protect our rights, property, or safety, or that of our users or others
• In connection with a business transaction such as a merger or acquisition
• With your explicit consent for specific purposes

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Generally, we retain customer data for up to 7 years after the end of our business relationship, and website usage data for up to 2 years. We will securely delete or anonymise your personal information when it is no longer needed.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: You can request copies of your personal data
• Right to rectification: You can request correction of inaccurate or incomplete data
• Right to erasure: You can request deletion of your personal data in certain circumstances
• Right to restrict processing: You can request limitation of how we use your data
• Right to data portability: You can request transfer of your data to another service
• Right to object: You can object to our processing of your personal data
• Right to withdraw consent: You can withdraw consent where processing is based on consent

Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, regular security assessments, and staff training on data protection principles.

International Data Transfers

Your personal information may be transferred to and processed in countries other than your own. When we transfer data outside the European Economic Area, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Complaints

If you believe we have not handled your personal data in accordance with this Privacy Policy or data protection laws, you have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados) or your local supervisory authority.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date at the top of this page.