Privacy policy

1. Who is responsible for your data

The data controller is:

• Name: I.D.E.A.S. LAB, a brand operated by Natalina Lopes Gonçalves
• NIF: 218989156
• Address: Rua Palmira Bastos, n.º 18, R/C, Porta 2, 2620-471 Ramada, Odivelas, Portugal
• Privacy contact: glopeslina@gmail.com

2. What data we collect

When you send the contact form, we collect:

• Your name and email address
• The topic you choose and the message you write
• The language of the page and the date and time you sent the form
• Your IP address, which is processed briefly for spam protection and appears in our hosting provider's server logs

3. Why we use it

We use the data you send only to read and answer your enquiry.

Your IP address is used only to limit automated and abusive submissions and to keep the website secure.

4. Legal basis

We process your name, email address, topic and message on the basis of your consent (Article 6(1)(a) GDPR), which you give by ticking the box on the form. You can withdraw it at any time.

We process IP addresses on the basis of our legitimate interest (Article 6(1)(f) GDPR) in protecting the website against spam and abuse.

5. Who processes your data

We use two service providers, which process data on our behalf:

• Resend — delivers the email that carries your message to us
• Vercel — hosts this website

6. International transfers

Resend and Vercel may process data in the United States. These transfers are safeguarded by the EU-US Data Privacy Framework and/or Standard Contractual Clauses.

7. How long we keep it

Emails containing enquiries are deleted after 24 months.

IP addresses used for spam protection are kept only briefly.

8. Your rights

You have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data erased
• Withdraw your consent at any time, without affecting processing carried out before the withdrawal
• Lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt

9. Contact

To exercise any of these rights, or to ask a question about this policy, write to the privacy contact given in section 1.