Privacy policy

1 Data controller

Grow Digital Studio handles personal data under the GDPR and Portuguese law. Professional address:

Av. São Miguel 249, esc.65, 2775-751 Carcavelos, Cascais, Portugal

The controller's legal name and tax number will be added once confirmed.

2 Data collected

The form collects your name, email, company and requested service. We receive information you choose to share by email or social media. An IP address may be processed to protect the form against abuse. Please do not include sensitive data in messages.

If you engage our services, we may need billing details, content and access required to perform the contract.

3 Purposes and legal basis

• Responding to requests, preparing proposals and arranging calls: pre-contractual steps at your request (GDPR Article 6(1)(b)).
• Providing agreed services: performance of a contract. Invoicing: compliance with legal obligations.
• Statistics and advertising, when configured: only with consent. A contact request does not subscribe you to marketing.

We do not sell data or make solely automated decisions with legal effects.

4 Cookies and measurement

Google Analytics, Google Ads and Meta Pixel tags are not active yet. If installed, statistics and advertising will only activate after your choice. You may refuse or change preferences in the footer. Cookie names and durations will be updated when tools are configured.

5 Providers and sharing

The site is hosted through Lovable. Contact requests are emailed to the studio, with a confirmation to the sender; the form does not create a database record. Other providers, including the inbox provider, will be identified once confirmed. We do not share data with unconfigured advertising tools.

Where applicable, transfers outside the EEA must rely on GDPR mechanisms, such as adequacy decisions or standard contractual clauses. We may disclose data when required by law.

6 Retention

• Requests without a contract: up to 24 months after the last contact.
• Client data: contract duration and applicable legal retention period.
• Invoices: 10 years under Portuguese tax legislation.
• Measurement data: the tool-specific period, to be confirmed before activation.

Inbox retention and message deletion are managed by the controller; the site does not perform automatic inbox deletion.

7 Your rights

You may request access, rectification, erasure, restriction, objection or portability where applicable, and withdraw consent without affecting prior processing. Contact hello@growdigitalstudio.com; the statutory response period is generally one month.

You may lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD).

8 Security and changes

We use a secure connection and reasonable safeguards. No system is completely immune. Our services are for businesses, not children under 16. This policy will be updated when legal details and providers are confirmed.