Privacy Policy

Who processes your data

Data submitted through this site's forms is processed by Growthful Creative, Ericeira, Portugal.

For any question about this policy or your personal data, you can contact us at growthfulcreative@gmail.com.

What data we collect

Contact form: name, email, company or project (optional), subject and message.

Project Builder: objective, project type, services of interest, budget range (when provided), timeline, name, email, phone (optional), company (optional), website (optional) and message (optional).

In both cases we also record your consent confirmation and, for security and spam-prevention purposes, technical information associated with the form submission (see "Forms and abuse prevention" below).

Purposes of processing

Responding to your contact request or project proposal.

Organising and classifying the requests we receive internally.

When you give explicit, optional consent for it, sending you marketing communications about Growthful Creative. This consent is collected in the forms, but we are not yet sending any marketing communications — this will only start once the channel is active, and never without your consent.

Legal basis

Processing data submitted through the forms is based on your explicit consent, given when you accept this Privacy Policy at the time of submission.

Processing technical data strictly necessary to prevent abuse and keep the forms secure (see next section) is based on our legitimate interest in keeping the site safe and functional.

Forms and abuse prevention

Our forms include technical anti-spam and anti-abuse mechanisms, including an invisible honeypot field and a time-based token associated with each submission.

To limit abuse attempts, the email address and originating IP address of each submission are converted into encrypted (hashed) values before any check — they are never stored or read in plain text for this purpose.

Marketing consent

Consent to receive marketing communications is always requested separately from the consent needed to respond to your request, and it is optional: you can submit the form without ticking it.

You can withdraw this consent at any time by contacting growthfulcreative@gmail.com.

Storage and access

Data is stored in the database managed through Supabase, and the site is hosted on Vercel — the two infrastructure providers actually used by this site.

Access to the data is restricted: only Growthful Creative has direct access and, only when the work requires it, occasional collaborators or specialists bound by confidentiality.

Your rights

Under applicable law, you have the right to access, rectify, erase, restrict or object to the processing of your data, and, where applicable, to data portability.

You can also withdraw your consent at any time, without affecting the lawfulness of processing carried out before that withdrawal.

To exercise any of these rights, contact growthfulcreative@gmail.com.

Data retention

Contact requests and proposals may be kept for up to 12 months after the last contact, except where a contractual relationship, legal obligation, need to establish or defend legal claims, or valid consent justifies a different period.

Complaint to the supervisory authority

If you believe the processing of your data does not comply with applicable law, you have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the competent supervisory authority in Portugal.

Contact

For any question about this policy or about how your data is processed, write to growthfulcreative@gmail.com.

Updates to this policy

This policy may be updated to reflect changes to how the site works or to applicable law. The date of the last update is shown at the top of this page.