1. Data Controller

The data controller responsible for your personal data is Sueste Creative, contactable at: info@sueste-creative.pt.

2. Data We Collect

We collect data you provide directly through our forms:

• Contact form: name, email address and message.
• Quote calculator: name, email, company, deadline, selected services and additional notes.

We also collect anonymous, aggregated browsing data via Google Analytics (see the Cookies section).

3. Purpose and Legal Basis for Processing

• Responding to enquiries and quotes. Legal basis: pre-contractual measures (Art. 6(1)(b) GDPR).
• Providing contracted services. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Sending marketing communications. Legal basis: consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time via the unsubscribe link in any communication or by emailing info@sueste-creative.pt.

4. Retention Period

Data submitted through our contact and quote forms is retained for a maximum of 2 years from the date of last interaction, unless a legal obligation or ongoing contract requires a different retention period.

5. Sub-processors and Data Transfers

We use third-party service providers who act as sub-processors and handle your data only according to our instructions:

• Resend Inc.: transactional email delivery. Data processed in EU servers (eu-west-1, Ireland). Privacy Policy.
• Cloudflare Inc.: website hosting and security. May transfer data outside the EU under standard contractual clauses. Privacy Policy.
• Google LLC (Analytics): anonymous traffic analysis. Data processed in the US under the EU-US Data Privacy Framework. Privacy Policy.

We may also share necessary data with partner collaborators (such as photographers or other creative service providers) solely for the execution of projects that involve them, with your knowledge.

6. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Access: find out what data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data ("right to be forgotten").
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing for direct marketing purposes.
• Restriction: request temporary suspension of processing.

To exercise any of these rights, contact us at info@sueste-creative.pt. We will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese data protection authority: Comissão Nacional de Proteção de Dados (CNPD).

7. Cookies

Our website uses cookies. For detailed information, please see our Cookie Policy.

8. Security

We adopt appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or disclosure, including encrypted transmission (HTTPS) and restricted data access.

9. Changes to This Policy

We may update this policy periodically. For material changes, we will publish the new version on this page with a revised update date. We recommend checking this page regularly.

10. Contact

For any questions regarding the protection of your personal data, contact us at: info@sueste-creative.pt