Privacy Policy

Last updated: 28 September 2026

1. Data Controller

JORA Aesthetics, based at Rua Manuel Ferreira Araújo 37, Braga, 4705-258, is the data controller for personal data collected through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Portuguese Law no. 58/2019 of 8 August.

Contact: geral@jora-aesthetics.pt

2. Data Collected and Purposes

We only collect data that is necessary for each purpose:

  • Email address — to send newsletters and service updates. Subscription is always voluntary and based on your explicit consent. You may unsubscribe at any time via the link in each email.
  • Contact form — name, email, phone (optional) and message, used solely to reply to your request.
  • Anonymous navigation data — we record interaction events (pages visited, services viewed, clicks on contact and booking buttons) linked to an anonymous, temporary session identifier stored only in your browser. This data does not identify users individually and is used solely to improve the website.
  • Analytics and advertising cookies — only with your consent (see section 3).

3. Cookies and Similar Technologies

If you accept in the cookie notice, we use the following third-party tools to measure visits and the effectiveness of our advertising:

  • Google Analytics 4 (Google Ireland Ltd.) — website usage statistics.
  • Google Ads (Google Ireland Ltd.) — ad conversion measurement (e.g. booking or contact requests). When you submit the contact form, your email and phone may be sent in hashed (encrypted) form to attribute the conversion to the ad.
  • Meta Pixel (Meta Platforms Ireland Ltd.) — ad measurement on Instagram and Facebook.

If you reject, these tools do not store cookies on your device; Google may receive anonymous cookieless signals (Consent Mode). These providers may transfer data outside the EEA under the European Commission’s Standard Contractual Clauses. You can change your choice at any time via the “Cookies” link in the footer.

4. Legal Basis

Newsletters and analytics/advertising cookies are based on the consent of the data subject (Article 6(1)(a) GDPR and Portuguese Law no. 41/2004). Replies to contact requests are based on pre-contractual steps taken at your request (Article 6(1)(b)). You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Data Retention

Email data is retained for as long as your subscription remains active. Following unsubscription or a deletion request, your data will be erased within 30 days. Contact requests are kept only for as long as needed to reply and follow up. Anonymous navigation data is retained for a maximum of 12 months, after which it is automatically deleted. Your cookie choice is stored in your browser until you change or clear it.

6. Sharing with Third Parties

Your data is never sold. We use service providers (e.g. newsletter delivery platforms and, with your consent, the tools listed in section 3) who act under our instructions or under their own data processing terms, with GDPR compliance guarantees.

7. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data;
  • Rectify inaccurate or incomplete data;
  • Request erasure of your data;
  • Object to processing or request restriction;
  • Data portability;
  • Lodge a complaint with the CNPD (Portuguese Data Protection Authority) at www.cnpd.pt.

To exercise your rights, contact us at geral@jora-aesthetics.pt. We will respond within 30 days.

8. Security

We adopt appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction.

9. Changes to This Policy

Any material changes to this policy will be communicated by email to subscribers and published on this page with an updated date.