top of page

Privacy Policy

Last updated: 11.8.26
 
we stage (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect through the website westage-pt.com, why we collect it, how we use it, and the rights you have. We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Portuguese data protection law (Lei n.º 58/2019).

1. Who is responsible for your data (Data Controller)
The controller responsible for your personal data is:

For any question about this policy or about your personal data, contact us at the email above.

2. What personal data we collect
We only collect the data you choose to give us through the contact form and any direct communication:

  • Identification and contact data: your name, email address, and (if you provide it) telephone number.

  • The content of your message and any project details you share with us.

  • Technical data automatically collected by the website for security and basic functioning (e.g. limited server/log data and strictly necessary cookies).

We do not knowingly collect special categories of data (such as health, political or religious data). Please do not include such information in your messages.

3. How we collect your data — the contact form
The main way we collect personal data is through the website’s contact form. When you submit the form, your details are sent to our business email so we can respond to your enquiry. The form is operated using one of the two services below
.
Wix Forms
Our website and contact form are hosted on Wix. When you submit the form, your responses are processed and stored by Wix.com Ltd. on our behalf and forwarded to our business email. Wix acts as our data processor. See Wix’s privacy policy at https://www.wix.com/about/privacy.
(Site owner: keep only the option you actually use and remove this instruction line and the other option.)

4. Why we use your data and our legal basis
We process your personal data for the following purposes, each with a lawful basis under the GDPR:

  • To respond to your enquiry and communicate with you about our design services — legal basis: steps taken at your request prior to entering into a contract, and our legitimate interest in answering prospective clients.

  • To provide and manage our services if you become a client — legal basis: performance of a contract.

  • To keep records and comply with legal, tax and accounting obligations — legal basis: compliance with a legal obligation.

  • To operate, secure and improve the website — legal basis: our legitimate interest.

  • For marketing communications, only where you have agreed — legal basis: your consent, which you can withdraw at any time.

5. How long we keep your data
We keep personal data only for as long as necessary for the purpose it was collected:

  • Enquiries that do not become projects: kept for a reasonable period to follow up, then deleted.

  • Client and project data: kept for the duration of the engagement and for the period required by Portuguese legal, tax and accounting rules afterwards.

  • After the retention period, data is securely deleted or anonymised.

6. Who we share your data with
We do not sell your personal data. We share it only with trusted service providers who help us run our business, and only as needed:

  • Our website host and contact-form provider (see section 3).

  • Email, cloud storage and productivity providers (e.g. Google Workspace) used to receive and manage enquiries.

  • Our accountant and, where legally required, public authorities.

These providers act as our processors under written agreements and may only use the data on our instructions.

7. International data transfers
Some of our service providers (for example Google, Wix, Meta or LinkedIn) are based outside the European Economic Area (EEA) or may process data in countries outside the EEA, including the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards, such as the EU–U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses (SCCs), to ensure your data remains protected.

8. Cookies
A cookie is a small text file stored on your device when you visit a website. Cookies can be:

  • Strictly necessary cookies — required for the website to work. These do not need your consent.

  • Analytics, functional and advertising cookies — used to measure traffic, remember preferences, or show relevant ads. These are only placed with your prior consent.

Currently the website uses only strictly necessary cookies. If this changes, we will request your consent through a cookie banner before any non-essential cookies are placed, and you will be able to accept, reject or change your choices at any time.
 
When advertising and analytics tools are active (to be enabled by the site owner):
When enabled, the website will use the following third-party tools, which set cookies and may share limited data with those providers for measurement and advertising, including remarketing:

These tools may transfer data outside the EEA under the safeguards described in section 7. They will load only after you give consent through our cookie banner.

9. Links to social media
Our website may contain links to our profiles on Instagram, LinkedIn and other platforms. Clicking a link takes you to those platforms, which have their own privacy policies. We are not responsible for their content or their processing of your data.

10. Your rights
Under the GDPR you have the right to:

  • Access the personal data we hold about you.

  • Request correction of inaccurate or incomplete data.

  • Request erasure of your data (“right to be forgotten”).

  • Restrict or object to certain processing.

  • Request portability of the data you provided to us.

  • Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at kfirelg@gmail.com. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.

11. Data security
We take reasonable technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, including using secure (HTTPS) connections and reputable service providers. No method of transmission over the internet is completely secure, but we work to protect your data using commercially acceptable means.
12. Changes to this policy
We may update this Privacy Policy from time to time. The current version, with its last-updated date, will always be available on this page. We encourage you to review it periodically.
13. Contact
If you have any questions about this Privacy Policy or how we handle your data, contact us at kfirelg@gmail.com.

bottom of page