Privacy policy

1. Who is responsible for the processing

Lucas Sant’Ana Camargo, trading as Luz Digital, based in Costa da Caparica, Portugal.

Contact for any question about personal data: lucassantana0897@gmail.com.

2. What data we process, why, and on what legal basis

We only process what is needed in three situations:

• Quote request (website form): your name, email, phone and company (if you give them), the service you want, your answers to that service’s questions, timeline and budget, and the message you write. We use them to reply and prepare a proposal. Legal basis: steps taken at your request before entering a contract (Article 6(1)(b) GDPR).
• Direct contact by email or WhatsApp: the data you send us, so we can reply. Legal basis: pre-contractual steps or our legitimate interest in answering people who contact us (Article 6(1)(b) and (f)).
• Technical browsing data: when you visit, Cloudflare, which serves the site, processes your IP address and request data (such as browser type and the page requested) to deliver the site, protect it from abuse and limit repeated form submissions. Legal basis: legitimate interest in the security and proper working of the site (Article 6(1)(f)).

3. Cookies and analytics

This website does not use cookies or similar tracking technologies, and has no analytics or advertising tools. That is why it shows no cookie banner and asks for no consent for them.

The typeface is served by the site itself, without requests to third-party services.

4. Who receives the data

We do not sell your data or share it for marketing. We only use the following providers, who process data on our behalf:

• Cloudflare, Inc.: hosts the website, runs the form and forwards the request to our email.
• Google (Gmail): the mailbox where we receive requests and replies.

5. Links to other websites

The site links to LinkedIn, WhatsApp and the websites of work we have built. Once you open them, those services’ own policies apply, and we do not control them. If you choose to send your request through WhatsApp, the conversation takes place on Meta’s platform.

6. Transfers outside the European Union

Cloudflare and Google are US-based companies and may process data outside the European Economic Area. Both state in their documents that these transfers rely on their certification under the EU–US Data Privacy Framework (the European Commission’s adequacy decision) and, if that certification ceases to be valid, on the EU standard contractual clauses.

7. How long we keep data

• Quote requests that go nowhere: up to 12 months after the last contact, then deleted.
• Requests that lead to a project: for the duration of the client relationship and afterwards for the periods required by law (for example tax and accounting obligations).
• This website does not store form data or visitor logs in a database. Technical data processed by Cloudflare follows Cloudflare’s own retention periods.

8. How we protect data

The site uses HTTPS, security headers, server-side validation, protection against automated submissions and a request limit. The form only sends to a fixed, access-restricted email address. No measure removes all risk, but we review these protections regularly.

9. Your rights

At any time, you can:

• Access your data and receive a copy.
• Ask for incorrect data to be corrected.
• Ask for your data to be erased.
• Ask for processing to be restricted, and object to it.
• Ask for data portability, where applicable.
• Withdraw consent, where processing is based on it.

10. How to exercise your rights and complain

Write to lucassantana0897@gmail.com. To protect your data, we may ask you to confirm your identity before acting on a request. We reply within one month, which may be extended for complex cases, and we will tell you if that happens.

You also have the right to lodge a complaint with the supervisory authority in Portugal, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

11. Automated decisions and minors

We make no automated decisions and do no profiling with your data. The site is not aimed at minors.

12. Changes to this policy

If we change how we process data, we update this page and the date at the top.