Privacy Policy

1. Who We Are

Arvora is a digital agency based in the Algarve, Portugal. We provide web design, AI automations, branding, photography, videography, and tech support services.

Contact: info@arvora.eu

Website: https://arvora.eu

2. Data We Collect

We collect personal data only when you voluntarily provide it:

• Contact forms: Name, email address, phone number, company name, and your message.
• Support requests: Name, contact details, and a description of your issue.
• Email communication: Any information you include in emails sent to us.

We also collect limited technical data automatically:

• Analytics: Anonymous usage data (pages visited, time on site, device type) via privacy-respecting analytics.
• Server logs: IP address, browser type, and access timestamps for security purposes.

3. How We Use Your Data

We use your personal data to:

• Respond to your enquiries and provide the services you request.
• Send project updates and relevant communications.
• Improve our website and services.
• Comply with legal obligations.

We do not sell, rent, or trade your personal data to third parties.

4. Legal Basis (GDPR)

We process your data under the following legal bases:

• Consent: When you submit a contact or support form.
• Legitimate interest: To improve our services and protect against fraud.
• Contractual necessity: To deliver services you have engaged us to provide.
• Legal obligation: To comply with Portuguese and EU law.

5. Data Retention

We retain personal data only as long as necessary for the purposes described above. Contact form submissions are retained for up to 24 months. Project-related data is retained for the duration of the client relationship plus 5 years for legal compliance.

6. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (right to be forgotten).
• Restrict processing of your data.
• Port your data to another controller.
• Object to processing based on legitimate interest.
• Withdraw consent at any time.

To exercise any of these rights, email us at info@arvora.eu. We will respond within 30 days.

7. Cookies

This website uses only essential cookies required for the site to function correctly. We do not use advertising or tracking cookies. If we introduce optional cookies in the future, we will request your consent before placing them.

8. Third-Party Services

We may use the following third-party services that process data on our behalf:

• Hosting provider: Our servers are located in Germany (Hetzner Online GmbH), within the EU.
• Email: Transactional emails may be sent via a third-party email service.

All third-party processors are GDPR-compliant and bound by data processing agreements.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including HTTPS encryption, secure server infrastructure, and access controls. However, no method of transmission over the internet is 100% secure.

10. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD):

Comissao Nacional de Proteccao de Dados (CNPD)
Rua de Sao Bento, 148-3.o, 1200-821 Lisboa, Portugal
Website: cnpd.pt

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.