Privacy Policy

Who controls your data

LAVEONE is a self-service laundry brand within the Innova X ecosystem. For the purposes of this policy, LAVEONE acts as the controller of personal data collected through this site.

The franchisor's company registration details will be published on this page once incorporation is complete.

What data we collect

We collect only what is needed to reply to you and to understand how the site is used.

• Data you provide in forms: name, email, phone, WhatsApp, country, city, role, company or building, investment capacity, model of interest and the content of your message.
• Traffic source data: entry page, campaign parameters (UTM), ad identifier and device.
• Technical browsing data: IP address (recorded in truncated form), browser type and language.
• Consent records: which permission you gave, when and from which page.

What we use it for

• Replying to your enquiry and running the commercial process for a franchise, building or partnership.
• Qualifying your interest so we can route you to the right person on the team.
• Sending marketing communications, where you have expressly agreed.
• Measuring campaign performance and improving the site.
• Meeting applicable legal and regulatory obligations.

On what legal basis

We process data on the basis of the consent you give when submitting a form, the performance of pre-contractual steps when you apply for a franchise, compliance with legal obligations, and legitimate interest for site security and improvement.

For visitors in the European Economic Area and the United Kingdom, the equivalent GDPR bases apply. Non-essential cookies are only activated after consent.

Who we share it with

We do not sell personal data. We share it only with processors who provide services to us and who are contractually bound to protect that information.

• Website hosting and infrastructure providers.
• The CRM platform used by our commercial team.
• Analytics and advertising tools, where you consent to those cookie categories.
• Innova X ecosystem companies involved in the expansion process.

International transfers

Some of our providers process data outside the visitor's country of origin. In those cases we require appropriate contractual safeguards, including standard data protection clauses where applicable.

How long we keep it

• Commercial leads: up to 24 months after the last contact, unless you ask for deletion sooner.
• Consent records: for as long as needed to evidence the permission given.
• Data required by legal obligation: for the period set out in applicable law.

Your rights

You may request confirmation that processing exists, access to your data, correction of incomplete or outdated information, anonymisation or deletion, portability, withdrawal of consent and information about sharing.

To exercise any of these rights, use the "Your data" page or write to our data protection officer. We respond within the periods set out in the LGPD and the GDPR.

Security

We apply technical and organisational measures to protect personal data, including encrypted transmission, access control, minimisation of data in system logs and periodic review of dependencies.

No system is entirely immune. In the event of an incident posing significant risk to data subjects, we will notify those affected and the competent authorities as required by law.

Children and young people

This site is not intended for anyone under 18 and we do not knowingly collect data from children or young people.

Changes to this policy

We may update this policy. Where a change is significant, we will note it on this page and, where appropriate, by email. The last updated date is always visible at the top.