Privacy Policy

1. Data controller

Estrata Digital Agency, based at Rua do Sardoal, 173, Costa, 4810-546 Guimarães, Portugal, is the controller of personal data collected through this website.

For any privacy or data protection matter, contact us at info@estratadigital.com.

2. Data we collect

We only collect what we need to answer requests and deliver our services:

• Contact details submitted through the contact and booking forms: name, company, role, email, phone, website and message.
• Booking details: the date and time you select for the meeting.
• Technical and usage data collected through cookies and analytics: truncated IP address, device and browser type, pages visited and traffic source.

3. Purposes and legal bases

• Answering enquiries and preparing proposals — pre-contractual steps at your request (Art. 6(1)(b) GDPR).
• Scheduling and running meetings, including confirmation emails and calendar invitations — pre-contractual steps and legitimate interest ((b) and (f)).
• Delivering and managing contracted services and invoicing — contract performance and legal obligation ((b) and (c)).
• Website usage analytics and marketing communications — consent ((a)), which you may withdraw at any time.

4. Processors and recipients

We never sell personal data. We share it only with providers acting as processors under data processing agreements that guarantee an equivalent level of protection:

• Website and database hosting and infrastructure.
• Transactional email platform, for confirmations and notifications.
• CRM platform, for managing contacts and sales opportunities.
• Calendar and video conferencing services, for scheduled meetings.
• Web analytics tools, only with your consent.

5. International transfers

Some providers may process data outside the European Economic Area. Where this happens, transfers rely on European Commission adequacy decisions or Standard Contractual Clauses, together with additional technical safeguards.

6. Retention periods

• Enquiries and bookings with no commercial follow-up: up to 12 months.
• Client data and contractual documentation: for the duration of the relationship and any applicable legal periods, including 10 years for tax purposes.
• Analytics data: up to 14 months.
• Consent records: 5 years.

7. Your rights

You may at any time exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw consent without affecting the lawfulness of processing already carried out.

To exercise these rights, write to info@estratadigital.com. We reply within 30 days at most. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD).

8. Security

We apply appropriate technical and organisational measures, including encrypted communication (HTTPS), role-based access control and data minimisation.

9. Automated decisions and minors

We do not carry out automated decision-making with legal effects or profiling with such impact. Our services are aimed at businesses and are not directed at children under 16.

10. Changes to this policy

This policy may be updated whenever legal or operational changes occur. The date of the latest update is shown at the top of this page.