Privacy policy

1. Data controller

The data controller responsible for your personal data is:

Verde Staur
Rua da Escola Politécnica 56, 1250-102 Lisbon, Portugal
Registration: 518 234 567
Email: [email protected]
Phone: +351 21 384 7720

For privacy-related enquiries, contact us at the email above with the subject line "Privacy request".

2. What data we collect

We may collect and process the following categories of personal data:

• Identity and contact data: name, email address, phone number, postal address
• Enquiry content: messages you send via our contact form, photos of your property, dimensions and brief descriptions
• Contract and billing data: invoice details, payment records, project correspondence
• Technical data: IP address, browser type, device information collected via cookies (see our Cookie policy)
• Survey records: site notes and photographs taken during property visits with your consent

3. Legal basis for processing

We process personal data on the following legal bases under Article 6 GDPR:

• Contract (Art. 6(1)(b)): Processing necessary to provide design services you request and to manage our agreement with you.
• Legitimate interests (Art. 6(1)(f)): Responding to enquiries, improving our services, maintaining business records, and protecting legal claims, where your interests do not override ours.
• Consent (Art. 6(1)(a)): Where required for non-essential cookies or optional marketing communications. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): Retaining accounting records as required by Portuguese legislation.

4. How we use your data

• Respond to contact form submissions and quote requests
• Schedule and conduct site surveys
• Prepare landscape design deliverables
• Issue invoices and process payments
• Communicate about project revisions and delivery
• Comply with tax and accounting obligations
• Maintain website security and analyse aggregated traffic patterns

5. Data retention

• Enquiry records without a contract: up to 24 months from last contact
• Active project files: duration of the project plus 5 years for warranty and liability purposes
• Accounting records: as required by Portuguese law, typically 5–10 years
• Cookie analytics: up to 14 months (see Cookie policy)
• Marketing consent records: until consent is withdrawn plus 12 months for audit purposes

When retention periods expire, data is securely deleted or anonymised.

6. Sharing and processors

We do not sell personal data. Data may be shared with cloud hosting and email providers, accounting software providers, contractors you appoint when you authorise us to share plans, and public authorities when required by law. All processors act under written agreements with appropriate security measures.

7. International transfers

Our primary systems are located within the European Economic Area (EEA). If any processor transfers data outside the EEA, we ensure appropriate safeguards such as EU Standard Contractual Clauses or an adequacy decision by the European Commission.

8. Security

We implement encrypted connections (TLS), access controls on project files, password-protected devices for staff, and regular review of data access. No method of transmission over the internet is completely secure.

9. Your rights

Under GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent where processing is consent-based. Email [email protected] to exercise these rights. We respond within one month.

10. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on data subjects.

11. Children's data

Our services are directed at adults commissioning property work. We do not knowingly collect data from children under 16.

12. Complaints

You may lodge a complaint with:

Comissão Nacional de Proteção de Dados
Av. D. Carlos I, 134, 1200-651 Lisbon, Portugal
Website: www.cnpd.pt

We ask that you contact us first so we can try to resolve your concern directly.

13. Changes to this policy

We may update this policy to reflect legal or operational changes. The "Last updated" date at the top will be revised accordingly.