Privacy policy

Who is responsible

The controller of your data is Maria Madeira, an independent growth consultant based in Lisbon, Portugal, NIF 256029342. For anything in this policy, email info@mariamadeira.com.

What I collect

Only what you choose to send me:

• Through the contact form: your name, email address, website (optional), what you need help with (optional) and your message.
• By email: whatever you include in your email.

If the form can't send your message, it opens your email app with the message filled in, and you send it from there.

This website sets no cookies and uses no analytics or advertising trackers. Fonts are served from this website, so opening a page sends no request to a third party.

Why I use it, and the legal basis

• To reply to your enquiry and, if you ask, prepare a proposal: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)).
• To keep a record of our correspondence: my legitimate interest in being able to refer back to what was discussed and agreed (Article 6(1)(f)).

Form messages go only to Formspree and my inbox. They are not added to Klaviyo or any mailing list, and I don't sell or share your details with anyone for marketing.

Who else handles it

• Formspree, Inc. delivers contact form messages to my inbox. It processes data in the United States, so sending the form transfers your details outside the EU. That transfer relies on the safeguards GDPR requires for transfers to the United States (Chapter V): the Standard Contractual Clauses approved by the European Commission, or the EU-US Data Privacy Framework where the provider is certified.
• Vercel Inc. hosts this website. Like any host, it keeps server logs, such as IP addresses, for security and to keep the site running. Vercel is based in the United States and certified under the EU-US Data Privacy Framework.
• My email provider stores the emails I send and receive.

How long I keep it

Enquiries are kept for 24 months after our last contact, then deleted. If you become a client, our correspondence is kept for as long as the law requires, for example under accounting and tax rules.

Your rights

You can ask me for access to your data, to correct or delete it, to restrict or object to how I use it, and to receive it in a portable format. Email info@mariamadeira.com and I'll reply within one month, as GDPR requires.

If you think I have handled your data wrongly, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt, or to the data protection authority where you live.

Changes to this policy

If this policy changes, the new version will be published on this page with a new date.