Privacy Policy
Last updated: September 2026
Who we are
Liberodesign, Lda. ("liberodesign," "we," "us") is the data controller for the personal data collected through this website. Registered office: R. dos Bombeiros Voluntários 9, Braga, Portugal. NIPC: 516 247 387. Contact for privacy matters: support@liberodesign.com. We haven’t appointed a Data Protection Officer, as one isn’t required for a business of our size and activities.
What data we collect
Contact enquiries: name, email, phone (optional), company (optional), your message, and the service, budget range and language options you select.
Orders: name, email, phone, billing address, company name and VAT number (optional, for businesses), and project preferences (kickoff week, call format, project language, notes).
Payment: card details are entered directly into the payment step and are never stored, logged or sent to our servers — only a payment confirmation reference reaches us.
Abuse prevention: a salted hash of your IP address, kept for up to 24 hours, used only to enforce rate limits on our forms.
Analytics: only if you consent — see "Cookies" below and our full Cookie Policy.
Why we collect it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Responding to enquiries | Art. 6(1)(b) GDPR — steps prior to entering a contract |
| Processing and fulfilling orders | Art. 6(1)(b) GDPR — performance of a contract |
| Invoicing and accounting records | Art. 6(1)(c) GDPR — legal obligation; kept for 10 years |
| Analytics (Google Analytics 4) | Art. 6(1)(a) GDPR — your consent |
| Preventing abuse of our forms | Art. 6(1)(f) GDPR — legitimate interest, kept to a minimum |
How long we keep it
Enquiries that don’t turn into a contract: kept for 24 months, then deleted.
Order and contract records: kept while the contract is active, and invoicing records for 10 years as Portuguese law requires.
Abuse-prevention IP hashes: kept for up to 24 hours.
Analytics cookies: 13 months, Google’s standard duration.
Your rights
Under the GDPR, you can ask us to: give you access to the personal data we hold about you; correct it if it’s inaccurate; erase it; restrict or object to its processing; give you a copy in a portable format; and you can withdraw consent at any time (for analytics, this doesn’t affect processing already carried out). To exercise any of these rights, write to support@liberodesign.com. If you’re not satisfied with our response, you can complain to the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese data protection authority — cnpd.pt.
Changes to this policy
If we make a material change to how we handle personal data, we’ll update this page with a new "last updated" date.