1 — Who we are
Tavares Marketing ("we", "us") is the data controller for the personal data processed through this website. We are based in Porto, Portugal. For any privacy question you can reach us at info@tavaresmarketing.com.
2 — What we collect
We only collect what you give us or what is strictly needed to run the website.
- Contact form data: name, work email, company name, primary market, budget range and the message you write.
- Email correspondence: when you email us, we keep the message and metadata such as date and sender address.
- Technical data from your visit: IP address, browser, device type, referring page and pages visited. We use this only to keep the site secure and to understand aggregate usage.
- Cookies: only strictly necessary cookies for security and language preference. We do not run advertising trackers or third-party analytics that profile you.
3 — Why we use it
We process personal data for clearly defined purposes:
- To respond to your enquiry and prepare a written point of view.
- To enter into and perform a contract if we end up working together.
- To meet legal and accounting obligations once we have a commercial relationship.
- To keep our website, infrastructure and email secure against abuse.
4 — Legal basis
Depending on the situation we rely on one of the following GDPR bases: your consent (which you can withdraw at any time), the necessity to take steps at your request before entering into a contract, the performance of a contract, our legitimate interest in running a secure website and a healthy business, and our legal obligations.
5 — Who can see your data
We do not sell your data. We share it only with carefully chosen processors who help us run the agency, under written agreements:
- Email and productivity provider (for example Google Workspace or Microsoft 365) to receive and respond to your message.
- Transactional email provider (Resend) to deliver form submissions reliably from the website.
- Hosting provider (Vercel) to serve the website.
- Accountant and legal advisors, when we have a contractual relationship and only to the extent strictly required.
6 — Where it is stored
We prefer providers that store data inside the European Economic Area. Where a processor uses servers outside the EEA, we rely on the European Commission's Standard Contractual Clauses and additional safeguards as required by GDPR.
7 — How long we keep it
Contact form messages: up to 24 months after our last meaningful exchange, then deleted or anonymized. Client contract data: as long as the contract is active plus the statutory retention period required by Portuguese law (typically 10 years for accounting documents). Website logs: maximum 12 months.
8 — Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate data or complete incomplete data.
- Erase your data where there is no overriding reason to keep it.
- Restrict or object to certain processing.
- Data portability where the processing is automated and based on consent or contract.
- Withdraw consent at any time, without affecting prior lawful processing.
- Lodge a complaint with the Portuguese Data Protection Authority (CNPD) or your local supervisory authority.
9 — Cookies
We use a minimal set of strictly necessary cookies for language preference and basic security. No advertising cookies, no behavioural profiling. If we add analytics in the future, we will use a privacy-friendly tool that does not require consent or we will ask for it explicitly.
10 — Changes
We may update this statement as our processes evolve or laws change. We will update the date at the top of this page. Material changes will be highlighted on the homepage for at least 30 days.
11 — Contact
Questions, requests under the GDPR, or concerns about how we handle your data: info@tavaresmarketing.com. We respond within two business days.