Privacy Policy

BTX Ventures LLC ("BTX", "we", "us") is a Florida Limited Liability Company (Florida Document No. L24000114471) with its principal place of business at 111 NE 1st Street, 8th Floor, Suite 8304, Miami, FL 33132, United States. We operate the Al-Parfum brand and its online stores at www.alparfum.com, and we are the data controller for the personal data described in this policy.

Contact for any privacy matter: contact@alparfum.com, or by post to the address above.

This policy applies to:

• our brand websites and online stores (currently Al-Parfum at www.alparfum.com), including orders placed on them and the messages we send about those orders; and
• BTX Ventures Ads Reporting, an internal application used only by our staff, which connects to the Google Ads API (see section 6).

Each store also publishes local-language terms, returns and privacy information for its customers; where they differ, the local store document prevails for that store's customers.

When you place an order: first and last name, phone number, delivery address (street, number, postcode, city, region), the products ordered, prices and the order date. We do not collect card or bank details — orders are paid in cash on delivery.

When you contact us or we confirm your order: the content of WhatsApp messages, SMS and calls related to your order, and their delivery status.

When you browse our websites: the pages you visit, the referring website, campaign parameters (UTM), the device type and a random session identifier kept in your browser's session storage. Our own visit analytics do not use cookies and do not store your IP address. Advertising cookies (Google, Meta) are only set after you accept them in the cookie banner, and you can change your choice at any time via "Manage cookies" in the store footer.

Advertising identifiers: if you arrive from an advertisement, the click identifier added by the advertising platform to the page address (for example Google "gclid" or Meta "fbclid") and the campaign parameters are stored with your order, so we can tell the platform that a click resulted in a confirmed purchase (our legitimate interest in measuring our advertising; you can object at any time by writing to us). If you accept advertising cookies, the identifier is also kept in your browser for up to 30 days. Advertising cookies and remarketing lists are only used with your consent.

Fraud prevention: the IP address used to place an order is recorded with the order to help detect fraudulent or duplicate orders.

• To process and deliver your order — confirming it with you, preparing it, shipping it, collecting payment on delivery and handling returns (performance of a contract).
• To keep you informed about your delivery — order confirmation, dispatch, tracking and delivery-issue messages by WhatsApp or SMS (performance of a contract).
• To measure and improve our advertising — reporting which campaigns lead to confirmed purchases (legitimate interests; where consent is required by law, we ask for it).
• To send occasional offers to past customers by SMS, always with a simple way to opt out (legitimate interests or consent, depending on the country).
• To prevent fraud and comply with legal obligations, such as tax and accounting record-keeping (legal obligation and legitimate interests).

We do not sell personal data. We share it only with service providers that act on our instructions:

• e-commerce platform provider (order management);
• fulfilment, warehouse and cash-on-delivery partners in Europe, who prepare orders and collect payments on delivery;
• courier companies that deliver the orders (in Portugal CTT, MRW or Correos Express; in Poland InPost);
• messaging providers (WhatsApp Business and SMS) used to contact you about your order;
• cloud hosting and database providers;
• an AI-based machine-translation provider, used so that our team can read customer messages written in other languages;
• advertising platforms (Google and Meta), which receive the advertising identifiers, order value and order time of confirmed purchases for conversion measurement — never your name, address or phone number in clear text.

We may also disclose data when required by law or to protect our rights.

BTX Ventures Ads Reporting is an internal tool, used only by BTX Ventures LLC staff, that accesses the Google Ads API with a service account authorised only on Google Ads accounts owned by BTX Ventures LLC. It has no public sign-in and does not access Google accounts or data of any other user or company.

Data accessed: for our own Google Ads accounts — account, campaign, ad group, keyword and ad names and settings, and performance metrics such as impressions, clicks, cost and conversions, by day.

How it is used: (a) to report our daily advertising cost alongside our daily revenue and profit in our internal dashboard and internal notifications; and (b) to upload offline conversions for purchases confirmed by our customers (click identifier, conversion time and order value), so that Google Ads only counts real purchases.

Storage and security: data from the Google Ads API is stored in our private database, encrypted in transit, and accessible only to authorised staff with individual logins. Credentials are kept as encrypted secrets and never in source code.

Sharing: we do not sell, rent or share data obtained from Google APIs with third parties, except our hosting provider that stores it on our behalf, or where required by law.

Retention and deletion: reporting data is kept for up to 24 months and then deleted or aggregated. You may request deletion at any time by writing to contact@alparfum.com.

Restrictions: data from Google APIs is not used to train artificial-intelligence or machine-learning models, is not used to create, edit or distribute images or any other media, and is not used for any purpose other than those described above.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Order and invoicing data: for the period required by tax and accounting law in the country of sale (generally up to 10 years).
• Order-related messages: up to 24 months after delivery.
• Website visit analytics: up to 24 months.
• Advertising click identifiers: up to 90 days after the order.
• Marketing preferences: until you opt out, plus a record of the opt-out.

If you are in the European Union, you have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability and to withdraw consent at any time. To exercise these rights, write to contact@alparfum.com; we answer within one month.

You may also complain to your data-protection authority — for example the CNPD in Portugal, the AEPD in Spain or the UODO in Poland.

BTX Ventures LLC is based in the United States, and some of our service providers process data outside the European Economic Area. Where this happens, we rely on the European Commission's Standard Contractual Clauses or other safeguards recognised by EU law.

We use encrypted connections (HTTPS), access controls with individual logins, encrypted storage of credentials and regular review of who has access. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of any breach as required by law.

Our stores and services are intended for adults. We do not knowingly collect personal data from anyone under 16.

We may update this policy from time to time; the effective date at the top shows when it was last changed. Significant changes will be highlighted on this page.

Questions or requests: contact@alparfum.com · BTX Ventures LLC, 111 NE 1st Street, 8th Floor, Suite 8304, Miami, FL 33132, United States.