Privacy Policy

Last updated 21 October 2026

This privacy notice for LA – Iluminação, Lda. (trading as Lustrarte) (“Company,” “we,” “us,” or “our”) describes how and why we might collect, store, use, and/or share (“process”) your personal information when you use our website (the “Site”) or contact us concerning products, services, or projects.

1. Personal Information Collected

Personal Information You Disclose to Us

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and services, or otherwise when you contact us.

The personal information that we collect depends on the context of your interactions with us and the Site, the choices you make, and the products and features you use. The personal information we collect may include the following:

Name, email address, telephone number, company or professional details, and any other information you choose to include in your communication.

Information Automatically Collected

When you visit, use, or navigate the Site, technical information may be collected through the systems and services supporting it. This information may not identify you by name but may still constitute personal data. It may include language preferences, referring URLs, device name and country, as well as the log and device data described below. This information is primarily needed to maintain the security and operation of the Site.

Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Policy on the Site.

The information we collect includes:

Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information that the website systems may collect when you access or use the Site and may record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called “crash dumps”), and hardware settings).
Device Data. Our service providers may collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.

2. Purposes of Personal Information Processing

We process your personal information for a variety of reasons, depending on how you interact with the Site, including:

  • To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
  • To protect the Site. We may process your information as part of our efforts to keep the Site safe and secure, including fraud monitoring and prevention.
  • To identify usage trends, where legally permitted and supported by the technologies in use.

3. Legal Bases for Processing Personal Information

The General Data Protection Regulation (GDPR) requires us to explain the valid legal bases we rely on in order to process your personal information. We may rely on the following legal bases to process your personal information:

Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.
Performance of a Contract. We may process your personal information when necessary to fulfill our contractual obligations to you, including providing requested services, or to take steps at your request prior to entering into a contract with you.
Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. These interests include operating and protecting the Site and responding to general inquiries.
Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.

For general inquiries, we rely on legitimate interests. Where an individual requests steps prior to entering into a contract with that individual, we may rely on performance of a contract or pre-contractual steps. The use of non-essential cookies requiring consent is based on consent.

4. Sharing of Personal Information

Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents (“third parties”) who perform services for us or on our behalf and require access to such information to do that work.

The relevant providers include Shopify, which operates the website platform. The Contact page includes an embedded Google Maps map. When this map loads, technical information (including the IP address and information about the device or browser) may be transmitted to Google.

We also may need to share your personal information where required by law or with competent public authorities.

5. Third-Party Websites and Services

The Site may link to third-party websites or online services. Accordingly, we do not make any guarantee regarding any such third parties, and we will not be liable for any loss or damage caused by the use of such third-party websites or services. The inclusion of a link towards a third-party website, service, or application does not imply an endorsement by us. We cannot guarantee the safety and privacy of data you provide to any third parties. Any data collected by third parties is not covered by this privacy notice. We are not responsible for the content or privacy and security practices and policies of any third parties, including other websites or services that may be linked to or from the Services. You should review the policies of such third parties and contact them directly to respond to your questions.

Some product pages link to an independent retailer, After Hall. Any purchases made on the retailer’s website are subject to that retailer’s terms and privacy practices.

6. Cookies and Other Technologies

We may use cookies and similar tracking technologies to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy on the Site.

7. International Data Transfers

Some of the providers used to operate this website, including Shopify and Google, may process personal information in countries outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, the requirements of the GDPR apply, including appropriate safeguards or an adequacy decision where required. Further information about applicable safeguards may be requested using the contact details below.

8. Retention of Personal Information

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

9. Security of Personal Information

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from the Site is at your own risk. You should only access the Services within a secure environment.

10. Your Privacy Rights

Under the GDPR, you have certain rights. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; and (iv) if applicable, to data portability. You can make such a request by using the contact details below.

We will consider and act upon any request in accordance with applicable data protection laws.

If you believe we are unlawfully processing your personal information, you also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in Section 12 (Contact Information About This Policy) below or, where available, updating your cookie preferences.

However, please note that this will not affect the lawfulness of the processing before its withdrawal, nor when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

If you have questions or comments about your privacy rights, you may email us at lustrarte@lustrarte.pt.

You may also object to processing on grounds relating to your particular situation, where applicable.

11. Updates to This Privacy Policy

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

12. Contact Information

If you have questions or comments about this notice, you may contact us at:

LA – Iluminação, Lda.
Tax Identification Number: 507 431 979
Rua da Embra, s/n
2430-108 Marinha Grande
Portugal
Telephone: +351 244 577 190
Email: lustrarte@lustrarte.pt