Privacy policy

Controller: Audre Rocha — Full Especialist, working at Aflores Beauty Spa, 330 SW 27th Ave, Miami, FL 33135, USA · Email: [email protected] · Phone: (561) 674-8971.

This policy explains which personal data we process when you visit this site, why we use it and how to exercise your rights.

1. Data we collect

• Newsletter: your email address, the site language and the date you gave consent.
• Our own statistics: page views and button clicks (booking, contact, social, recommended products), with approximate country, device type, referring page and an irreversibly encrypted IP identifier (hash). We do not store your IP address.
• Cookies and pixels: only if you accept them (see the Cookie policy).
• Direct contact: if you write to us by email, phone or WhatsApp, we use that data only to reply.

This site does not ask for health data. Bookings are made on the Aflores Beauty Spa booking platform (FlowBook), which has its own privacy policy; appointment data and payments are handled there, with payments processed by Stripe.

2. Why we use it

• To send news and offers if you subscribed (you can unsubscribe at any time).
• To understand which content is useful and improve the site.
• To measure ads on Google, Meta (Facebook/Instagram) and TikTok, only with your consent.
• To answer your questions.

3. Legal basis

Your consent (newsletter, cookies and pixels) and our legitimate interest in keeping the site secure and measuring its use in aggregate.

4. Who we share it with

We do not sell or rent your data. We use providers that process data on our behalf: Netlify (hosting), Supabase (database), Cloudflare (network and security) and, if you accept them, Google, Meta and TikTok. The Google map only loads if you click "Show map" or accept cookies. Some of these providers may process data outside your country, with the safeguards required by applicable law.

5. How long we keep it

Newsletter data until you unsubscribe or ask for deletion. Statistics for as long as needed for the purposes above.

6. Your rights

You may request access, correction, deletion or portability of your data, object to its use or withdraw consent at any time, under the LGPD (Brazil), the GDPR (European Union) and applicable US privacy laws such as the CCPA. Write to [email protected] or follow the steps in Data deletion.

7. Children

This site is not directed to children under 16 and we do not knowingly collect their data.

8. Security

We use encrypted connections (HTTPS), restricted access to data and irreversible IP encryption. No transmission over the internet is 100% secure.

9. Changes

If we update this policy, we will publish the new version here with its effective date.