Privacy policy

Who we are

Flow Frame Studio. For anything concerning your data, write to flowframestudio.pt@gmail.com.

We have not appointed a data protection officer, as this is not required at our scale or for the kind of processing we carry out.

What we collect

We collect only what you send us through the contact form or when booking a call:

• Name
• Email address
• Phone number (optional)
• Business name and type (optional)
• The message you write

What we use it for

We use these details solely to answer your enquiry and, if you go ahead, to prepare and carry out the agreed work. We do not use them for advertising, and we do not sell or share them with third parties for marketing.

The legal basis is Article 6(1)(b) GDPR (steps taken at your request prior to entering into a contract), together with your explicit consent given via the form checkbox, Article 6(1)(a).

Where the data goes

The form does not write to any database of ours. What you type becomes an email and is delivered to our mailbox. These companies process data on our behalf:

• Cloudflare, Inc. (USA): website hosting, DNS, cookieless analytics and Turnstile bot protection.
• Resend (USA): delivery of the form email.
• Cal.com, Inc. (USA): call scheduling, if you use that button.
• Our mailbox provider, where the message is stored.

Transfers outside the European Union

The companies above are US-based. Transfers rely on the Standard Contractual Clauses approved by the European Commission and, where applicable, certification under the EU-U.S. Data Privacy Framework.

How long we keep it

We keep contact enquiries for up to 12 months where they do not lead to work. If you become a client, tax documents are retained for the legally required 10 years. That period applies to invoices, not to your original message.

Your rights

You may ask us for access to, correction, erasure, restriction or portability of your data, and object to processing, by writing to flowframestudio.pt@gmail.com. We reply within one month.

If you believe we have not handled the matter properly, you may complain to the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.