Privacy policy
Last updated: 20.07.2026
Anurelle Unipessoal Lda. ("ANURELLE", "we", "us", "our") operates this store and website and provides an online educational course, "The Glow Back", and related content, features, and services (the "Services"). We also intend to offer physical skincare products through this store in the future; where relevant, this Privacy Policy covers those products as well. Our Services are powered by Shopify. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit or use the Services, take our quiz, enrol in our course, make a purchase, or communicate with us.
By using the Services, you acknowledge that you have read and understood this Privacy Policy. For the purposes of applicable data protection law (including the EU/UK GDPR and Portuguese Law No. 58/2019), Anurelle Unipessoal Lda. is the data controller of your personal information.
Personal Information We Collect or Process
Depending on how you interact with the Services, we may collect:
- Contact details — your name, email address, and, where you purchase physical products, your billing and shipping address and phone number.
- Financial and transaction information — payment card or account details (processed by our payment providers, not stored by us), purchase and order history, and refunds or cancellations.
- Account information — username, password, and preferences, where you create an account.
- Quiz responses — the answers you give in our skincare quiz, including information about your skin concerns and postpartum stage.
- Health-related information you choose to share — because our Services relate to postpartum skincare, you may voluntarily share information about your skin, pregnancy or postpartum stage, breastfeeding, or related concerns (for example in the quiz, in our course community on WhatsApp, or during live Zoom sessions). This may constitute health data (a special category of personal data). We process this information only with your explicit consent, and only to provide the educational guidance you have requested. Please share only what you are comfortable sharing.
- Course participation information — your questions, messages, and interactions during the live cohort, including within our WhatsApp group and Zoom sessions.
- Communications — the content of messages you send us.
- Device and usage information — IP address, browser and device information, and how you interact with the Services, collected via cookies and similar technologies (see our Cookie Policy).
How We Collect Personal Information
Directly from you; automatically through cookies and similar technologies (subject to your consent); and from our service providers acting on our behalf.
How We Use Your Personal Information
- To provide the Services. To deliver "The Glow Back", including giving you access to course videos, running the live cohort via Zoom and our WhatsApp group, answering your questions and providing personalized guidance, processing payment, managing your account and enrolment, and sending you course-related communications such as your confirmation and cohort schedule. Our course is educational and does not constitute medical advice.
- To provide personalized guidance. To use your quiz answers and information you choose to share to tailor the guidance and recommendations we give you — only where you have consented.
- To fulfil orders for physical products (where applicable in future) — to process, ship, and deliver products you purchase, and to handle returns, exchanges, and related requests.
- Marketing — with your consent, to send you emails about our Services, offers, and (in future) products. You can unsubscribe at any time.
- Security and fraud prevention — to protect the Services and detect or prevent fraudulent or unlawful activity.
- To communicate with you — to provide support and respond to you.
- Legal compliance — to comply with applicable law and respond to lawful requests.
Legal Bases for Processing (EEA/UK)
We rely on: (a) performance of a contract — to deliver the course or products you purchase; (b) your consent — for marketing, non-essential cookies, and any health-related information you choose to share (processed only on the basis of your explicit consent); (c) legitimate interests — to secure the Services, prevent fraud, and understand usage, balanced against your rights; and (d) legal obligation. You may withdraw consent at any time, without affecting processing carried out beforehand.
How We Disclose Personal Information
We share personal information with the following service providers, who process it on our behalf under contract and only as needed to provide the Services:
- Shopify — e-commerce, website hosting, and payment processing (Shopify Payments);
- PayPal — payment processing where you pay via PayPal;
- Klaviyo and Shopify Email — to send transactional, course-related, and (with consent) marketing emails;
- YouTube (Google LLC) — to host and deliver course video content;
- WhatsApp (Meta Platforms, Inc.) — to operate the private course community group;
- Zoom Video Communications, Inc. — to host live cohort sessions;
- Analytics and advertising providers, which may include Google (Google Analytics, Google Ads) and Meta (Meta/Facebook Pixel) — to understand how the Services are used and, where applicable, to measure and deliver advertising, only where you have consented via our cookie banner.
Each provider processes your information in accordance with its own privacy terms. We may also disclose information to comply with law, enforce our terms, or in connection with a business sale or reorganization.
International Transfers
Some of our service providers — including YouTube/Google, WhatsApp/Meta, and Zoom — are based outside the European Economic Area, including in the United States. Where we transfer your personal information outside the EEA, we rely on legally recognized safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision (including the EU–US Data Privacy Framework where applicable), to ensure your information remains protected.
Health Data — Additional Note
Because you may share health-related information with us, we want to be clear: we do not require you to share any health information to purchase the course; we process it only with your explicit consent and only to provide the guidance you ask for; and you may withdraw that consent or ask us to delete it at any time. Please do not share health information in the WhatsApp group that you do not wish other participants to see, as group messages are visible to other members.
Your Rights
Depending on where you live, you may have rights to access, delete, correct, port, object to, or restrict processing of your personal information, and to withdraw consent. To exercise any right, contact us at paula@anurelle.com. You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.
Children's Data
The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
Security and Retention of Your Information
We use reasonable measures to protect your personal information but cannot guarantee perfect security. We retain personal information for as long as needed to provide the Services, comply with our legal obligations (including tax and accounting record-keeping requirements), resolve disputes, and enforce our agreements.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for legal or regulatory reasons. We will post the revised Privacy Policy on this website and update the "Last updated" date.
Contact
This store and the Services are operated by:
Anurelle Unipessoal Lda. Estrada de São Tiago n.º 376 2415-543 Leiria, Portugal NIF: 518917150 Email: paula@anurelle.com
For the purposes of applicable data protection law, Anurelle Unipessoal Lda. is the data controller of your personal information.