Privacy policy

Personal data collected through webtogo.studio is processed by:

• WebtoGO, operated by Hugo Alberto Soares Curto
• Tax ID: PT266909213
• Address: R. Conselheiro Luís de Magalhães 31B, 3800-137 Aveiro, Portugal
• Email: ola@webtogo.studio

We only collect data you voluntarily submit through the contact form:

• Name
• Email and/or phone
• Project type
• Approximate budget
• Project description

We also collect aggregated technical data through analytics and marketing cookies, subject to your consent. See Cookie Policy for details.

• To respond to your enquiry and prepare a potential proposal. Legal basis: pre-contractual steps (Article 6(1)(b) GDPR).
• To send the form submission by email to ola@webtogo.studio. Same legal basis.
• To measure and optimise site and campaign performance. Legal basis: consent (Article 6(1)(a) GDPR), managed through the cookie banner.

We do not use your data for newsletters, commercial profiling, or third-party marketing.

• Contact form messages: up to 24 months after last contact, or until you request deletion.
• Data related to contracted projects: for the duration of the contract and for statutory tax retention periods (10 years under Portuguese law).
• Cookie-related data: as detailed in the Cookie Policy.

We only use processors strictly necessary to run the site:

Some of these entities may transfer data outside the European Economic Area. Transfers are covered by the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

Under the GDPR, you have the right to:

• Access your data
• Rectify incorrect or incomplete data
• Erase your data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time, without affecting the lawfulness of previous processing

To exercise any of these rights, email ola@webtogo.studio. We respond within 30 days. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) at cnpd.pt, or with your local supervisory authority.

We use HTTPS across the site, access control on email inboxes, and cloud infrastructure with ISO 27001 and SOC 2 certifications. That said, no internet transmission or storage system is 100% secure.

The site is not intended for users under 16, and we do not knowingly collect data from minors. If you believe a minor has submitted data, let us know so we can delete it.

Material changes are posted on this page with an updated date at the top. If changes affect data already collected, we provide reasonable prior notice.

For any question about this policy or how we handle your data, write to ola@webtogo.studio.