We treat your data with the same care we treat our brands.

Who we are

Wavy is a digital direction and marketing project by Mariana Antunes, a self-employed professional (Portuguese tax ID / NIF 249 433 761), based in Mafra and Samora Correia (Portugal). Mariana is the controller of your personal data. We work with established businesses in West and Greater Lisbon.

For any question about this policy or your data, you can reach us at geral@wavy.pt.

What data we collect

We collect only the minimum necessary to respond to you and improve the site:

• Contact data you voluntarily provide: when you send the form (name, email, your business name and the content of your message) or when you book a call via Calendly (name, email and whatever you enter when booking).
• Anonymous usage data collected by Google Analytics (only if you accept cookies), pages visited, time on site, device type, country. This data is aggregated and does not identify you.
• Technical logs automatically recorded by the server (Vercel) during page loads, such as IP address and browser type, used solely for security and diagnostics.

Cookies and similar technologies

We use cookies to understand how the site is used and improve it. On your first visit, we ask if you accept. You can decline, the site keeps working normally.

Cookies used (only after acceptance): Google Analytics 4 (anonymised traffic measurement). We don't use advertising cookies and we don't share data for that purpose.

Why we use your data

• Respond when you contact us.
• Schedule and prepare conversations/meetings with you.
• Understand site performance (aggregated).
• Comply with legal and tax obligations when applicable.

We don't use your data for unauthorised commercial purposes, don't sell it to third parties, and don't perform automated profiling that takes decisions about you.

Legal basis for processing

We process your data on the following legal bases:

• Pre-contractual steps and legitimate interest: to respond to the messages and requests you send us.
• Consent: for analytics cookies (Google Analytics), only activated if you accept.
• Legitimate interest: for the security and proper functioning of the site (server technical logs).
• Legal obligation: when the law requires us to keep data (e.g. invoicing).

You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Who we share with

We use third-party services that process data on our behalf, under data protection agreements:

• Vercel: site hosting (servers in US/EU).
• Google Analytics: anonymised traffic analysis.
• Resend (USA), the service that processes the sending of contact-form emails.
• Calendly (USA), the service we use for you to book calls with us (collects your name, email and whatever you enter when booking).

Some of these services may process data on servers outside the European Economic Area, namely in the United States. In those cases, the transfer is covered by appropriate safeguards, the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

How long we keep it

Emails and conversations: while the relationship is active, or until you request deletion. Analytics data: aggregated, kept for up to 14 months. Data required by law (invoicing, contracts): for the legally applicable period.

Your rights (GDPR)

You have the right to:

• Access the data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Limit or object to certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent at any time.
• File a complaint with the CNPD (Portuguese Data Protection Authority).

To exercise any of these rights, write to geral@wavy.pt. We respond within 30 days.

Changes to this policy

We may update this policy to reflect changes in our services or legislation. The current version is always on this page, with the date of last update at the top.