We treat your data with the same care we treat our brands.

Who we are

Wavy is a digital direction and marketing brand founded by Mariana Antunes, based in Mafra and Samora Correia (Portugal). We work with established businesses in the Western Zone and Greater Lisbon.

For any question about this policy or your data, you can reach us at geral@wavy.pt.

What data we collect

We collect only the minimum necessary to respond to you and improve the site:

• Contact data you voluntarily provide (e.g. when emailing us or booking a call) — name, email, optional phone, and the content of your message.
• Anonymous usage data collected by Google Analytics (only if you accept cookies) — pages visited, time on site, device type, country. This data is aggregated and does not identify you.
• Technical logs automatically recorded by the server (Vercel) during page loads, such as IP address and browser type, used solely for security and diagnostics.

Cookies and similar technologies

We use cookies to understand how the site is used and improve it. On your first visit, we ask if you accept. You can decline — the site keeps working normally.

Cookies used (only after acceptance): Google Analytics 4 (anonymised traffic measurement). We don't use advertising cookies and we don't share data for that purpose.

Why we use your data

• Respond when you contact us.
• Schedule and prepare conversations/meetings with you.
• Understand site performance (aggregated).
• Comply with legal and tax obligations when applicable.

We don't use your data for unauthorised commercial purposes, don't sell it to third parties, and don't perform automated profiling that takes decisions about you.

Who we share with

We use third-party services that process data on our behalf, under data protection agreements:

• Vercel — site hosting (servers in US/EU).
• Google Analytics — anonymised traffic analysis.
• Email provider — to receive and reply to your messages.

How long we keep it

Emails and conversations: while the relationship is active, or until you request deletion. Analytics data: aggregated, kept for up to 14 months. Data required by law (invoicing, contracts): for the legally applicable period.

Your rights (GDPR)

You have the right to:

• Access the data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Limit or object to certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent at any time.
• File a complaint with the CNPD (Portuguese Data Protection Authority).

To exercise any of these rights, write to geral@wavy.pt. We respond within 30 days.

Changes to this policy

We may update this policy to reflect changes in our services or legislation. The current version is always on this page, with the date of last update at the top.