Privacy Policy

1. Introduction

WebMar Studio ("we", "us", "our") is committed to protecting the privacy of our website visitors and clients. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website webmarstudio.com and our services.

This policy complies with the European Union's General Data Protection Regulation (GDPR) and other applicable data protection laws in Portugal.

2. Information We Collect

2.1 Information You Provide

We collect information you directly provide when you:

• Contact us through forms, email, or phone
• Request a proposal or quote
• Subscribe to our newsletter (if applicable)
• Hire our web design services

This may include: name, email, phone number, company name, project details, and any other information you choose to provide.

2.2 Automatically Collected Information

When you visit our website, we automatically collect:

• Browsing data: IP address, browser type, operating system, pages visited, time spent, referral pages
• Cookies: We use cookies and tracking technologies (see our Cookie Policy)
• Analytics data: Through Google Analytics, we collect aggregated visitor behavior data

3. How We Use Your Information

We use your personal information for these legitimate purposes:

• Service delivery: Respond to inquiries, provide quotes, execute website projects, and deliver customer support
• Communication: Contact you about ongoing projects, answer questions, and send relevant service information
• Website improvement: Analyze usage, identify trends, and enhance user experience
• Marketing: Send information about our services (only with your prior consent)
• Legal compliance: Fulfill legal obligations and protect our rights
• Security: Detect, prevent, and address fraud and technical issues

4. Legal Basis for Processing (GDPR)

We process your personal information based on:

• Consent: When you provide explicit consent (e.g., for email marketing)
• Contract performance: When necessary to provide services you contracted
• Legitimate interests: To improve services, ensure security, and conduct business analytics
• Legal obligations: When required by law (e.g., tax requirements)

5. Information Sharing

We do not sell your personal information. We may share information only in these circumstances:

5.1 Service Providers

• Hosting: Netlify (website infrastructure)
• Analytics: Google Analytics (website traffic analysis)
• Communications: Email and WhatsApp providers
• Payment processing: Secure payment processors (when applicable)

These providers are contractually obligated to protect your information and use it only for specified purposes.

5.2 Legal Requirements

We may disclose information if required by law, legal process, court order, or government request.

6. International Data Transfers

Your information may be transferred to servers outside Portugal, including countries that may not offer the same data protection level as the EU. We ensure appropriate protections such as EU-approved standard contractual clauses.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• HTTPS encrypted connections (SSL/TLS)
• Strict access controls and authentication
• Regular backups and disaster recovery plans
• Security monitoring and regular updates
• Staff training on security and privacy practices

However, no internet transmission or electronic storage is 100% secure.

8. Data Retention

We retain your personal information only as long as necessary:

• Contact data: While you're a client or until you request deletion
• Project data: Up to 7 years after project completion for legal and accounting purposes
• Analytics data: In aggregated, anonymized form indefinitely

9. Your Rights (GDPR)

Under GDPR, you have the following rights:

• Right of access: Request a copy of your personal information
• Right to rectification: Request correction of inaccurate or incomplete information
• Right to erasure: Request deletion of your personal information ("right to be forgotten")
• Right to restriction: Request limitation of processing
• Right to data portability: Request transfer of your information to another provider
• Right to object: Object to processing for direct marketing purposes
• Right to withdraw consent: Withdraw consent at any time
• Right to lodge a complaint: File a complaint with the data protection authority (CNPD in Portugal)

10. Cookies and Tracking

We use cookies and similar technologies to improve your website experience, analyze traffic, and personalize content. For detailed information, see our Cookie Policy.

11. Third-Party Links

Our website may contain links to third-party websites. We're not responsible for their privacy practices. We recommend reviewing their privacy policies.

12. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect information from minors. If we learn we've collected such information, we'll delete it immediately.

13. Changes to This Policy

We may update this Privacy Policy periodically. The last update date is indicated at the top. Significant changes will be communicated via website notice or email.

14. Contact and Data Protection Officer

15. Supervisory Authority

If you're unsatisfied with how we handle your personal information, you have the right to lodge a complaint with Portugal's data protection authority:

16. Consent

By using our website and services, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree, please do not use our website or services.