Privacy policy

Privacy Policy

Last updated: 26 August 2026

This Privacy Policy explains how IXLASER UNIPESSOAL LDA collects, uses, stores and protects personal data when you visit ixlaserstudio.com, contact us, request a quotation, discuss a project or subscribe to receive marketing communications.

1. Data controller

The controller responsible for processing your personal data is:

IXLASER UNIPESSOAL LDA
Rua de Costa Cabral 2285, 2A
4200-231 Porto
Portugal

Email: ixlaser1@gmail.com

For questions concerning this Privacy Policy or the processing of your personal data, please contact us using the email address above.

2. Personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

Contact information

This may include your name, email address, telephone number, company name and any information included in your message.

Project and quotation information

When you request a quotation or discuss a project, we may collect information about your business, project requirements, requested services, preferred timescale, budget and any documents, files or materials you voluntarily provide.

Customer and billing information

If you decide to work with us, we may collect the information required to manage the project and issue invoices, such as your name or company name, billing address, tax identification details and other necessary invoicing information.

IXLASER does not currently provide customer accounts or accept online payments through ixlaserstudio.com.

Marketing information

If you subscribe to our newsletter or agree to receive promotional communications, we collect your email address, consent status, subscription preferences and relevant email engagement information processed through Shopify Email.

You may unsubscribe at any time by using the unsubscribe link included in our marketing emails or by contacting us.

Technical and website information

When you visit ixlaserstudio.com, Shopify and Cloudflare may automatically process limited technical information, including:

IP address;
browser and device information;
operating system;
pages visited and interaction information;
referral information;
cookie or similar technology identifiers;
server, security and diagnostic logs.

This information is used to deliver, secure, maintain and understand the performance of the website.

3. How we obtain personal data

We collect personal data:

directly from you when you contact us, submit a form, request a quotation, provide project or billing information, or subscribe to marketing communications;
automatically through the website’s technical infrastructure, cookies and similar technologies;
through communications between you and IXLASER regarding a potential or active project.

Please do not send confidential personal information that is unnecessary for your enquiry or project.

4. Why we process your data

We process personal data for the following purposes and legal bases:

Responding to enquiries and preparing quotations

We use your contact and project information to respond to your message, understand your requirements and prepare a quotation.

The legal basis is taking steps at your request before entering into a contract and, where applicable, our legitimate interest in responding to business enquiries.

Providing contracted services

If you become a customer, we process the information necessary to plan, manage, deliver and communicate about the agreed services.

The legal basis is the performance of a contract.

Billing, accounting and legal compliance

We process customer and billing information to issue invoices, maintain business records and comply with applicable accounting, tax and legal obligations.

The legal basis is compliance with legal obligations and, where applicable, the performance of a contract.

Marketing communications

We use your email address to send newsletters, service updates and promotional communications only where you have provided consent.

The legal basis is your consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Website operation and security

Technical information may be processed to provide the website, prevent misuse, detect security threats, maintain service reliability and troubleshoot technical problems.

The legal basis is our legitimate interest in operating and protecting our website and business.

Establishing or defending legal claims

Where necessary, relevant information may be retained or used to establish, exercise or defend legal claims.

The legal basis is our legitimate interest in protecting our legal rights.

5. When providing data is required

You are not required to provide personal data merely to browse the public areas of the website.

However, certain contact, project or billing information may be necessary for us to:

respond to an enquiry;
prepare an accurate quotation;
enter into or perform a contract;
issue a legally compliant invoice.

If the necessary information is not provided, we may be unable to respond fully, prepare a quotation or provide the requested service.

Providing consent for marketing communications is always optional and is not a condition of receiving a quotation or service.

6. Who may receive your data

We limit access to personal data to recipients who require it for a legitimate business or legal purpose. These recipients may include:

authorised IXLASER employees and staff;
our accountant or tax adviser;
Shopify, which provides the website platform, contact and marketing infrastructure;
Cloudflare, which provides website security, performance and network services;
public authorities, courts or regulators when disclosure is legally required.

These recipients may only access the information needed for their relevant function.

We do not sell or rent your personal data.

7. Shopify and Shopify Email

Our website is operated using Shopify. Shopify may process technical, contact, form and marketing-related information on our behalf when providing its services.

Shopify Email is used to manage subscribers and send marketing communications. It may process information such as subscription status, email delivery, link clicks, unsubscribes and spam complaints. Email open information may also be processed depending on the Shopify Email tracking configuration and your consent choices.

More information about Shopify’s privacy practices is available at:

https://www.shopify.com/legal/privacy

8. Cloudflare

Cloudflare helps protect and deliver ixlaserstudio.com. In providing these services, Cloudflare may process technical information such as IP addresses, network traffic information, security events and diagnostic logs.

More information about Cloudflare’s privacy practices is available at:

https://www.cloudflare.com/privacypolicy/

9. International transfers

Shopify, Cloudflare or their authorised service providers may process information in countries outside Portugal or the European Economic Area.

Where personal data is transferred internationally, the relevant provider must use an appropriate transfer mechanism and safeguards required by applicable data-protection law. These safeguards may include adequacy decisions, standard contractual clauses or other legally recognised protections.

You may contact us if you would like further information about the safeguards relevant to your personal data.

10. How long we retain personal data

We retain personal data only for as long as necessary for the purpose for which it was collected.

The applicable retention period depends on the type of information and the reason it is processed:

enquiry and quotation information is retained while we respond, assess the potential project and carry out reasonable follow-up;
active customer and project information is retained for the duration of the business relationship and afterwards where reasonably necessary to maintain records or handle legal claims;
invoices, accounting records and their supporting documentation may be retained for 10 years, in accordance with applicable Portuguese tax and accounting requirements;
marketing information is retained until you withdraw your consent or unsubscribe, although limited suppression information may be kept to ensure we respect your request;
technical logs, security information and cookies are retained according to their purpose, configuration and the retention periods applied by Shopify and Cloudflare.

Information may be retained for longer where required by law, necessary for legal proceedings or requested by a competent authority. When information is no longer required, it will be deleted, anonymised or securely disposed of.

11. Cookies and similar technologies

ixlaserstudio.com uses cookies and similar technologies provided primarily through Shopify and Cloudflare.

These technologies may be used for:

essential website functionality;
security and fraud prevention;
remembering privacy or consent preferences;
website performance and diagnostics;
reporting and understanding how visitors use the website;
supporting newsletter forms and related Shopify services.

Where legally required, non-essential cookies will only be used after you provide consent through the website’s cookie controls.

You may accept, reject or manage applicable cookies through the website’s cookie banner. You may also control cookies through your browser settings, although blocking necessary cookies may affect website functionality.

Shopify’s cookie information is available at:

https://www.shopify.com/legal/cookies

12. Your data-protection rights

Subject to the conditions and limitations established by applicable law, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete information;
request deletion of your personal data;
request restriction of processing;
object to processing based on legitimate interests;
receive certain data in a structured, commonly used and machine-readable format;
request data portability where applicable;
withdraw consent at any time;
lodge a complaint with a data-protection authority.

To exercise your rights, contact ixlaser1@gmail.com. We may request reasonable information to confirm your identity before completing your request.

Withdrawing consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

13. Automated decision-making

IXLASER does not use personal data collected through ixlaserstudio.com to make decisions based solely on automated processing that produce legal or similarly significant effects.

14. Data security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure. You should avoid sending unnecessary sensitive or confidential information through general website forms or email.

15. External links

Our website may contain links to third-party websites. We do not control the privacy practices of those external websites. You should review the privacy policy of any third-party website you visit.

16. Changes to this policy

We may update this Privacy Policy when our services, website tools or legal obligations change.

The latest version will be published on ixlaserstudio.com with the revised “Last updated” date. Material changes may also be communicated through the website or another appropriate method.

17. Contact

For privacy questions, requests or complaints, contact: