INFORMATION
Privacy and Cookies
Last updated: 25/09/2026
This page explains how I handle personal data when you visit this website, contact me or book an introductory call. It also explains the services involved and how you can exercise your privacy rights.
1. Who is responsible for your data?
The person responsible for processing your personal data is:
Catarina Filipe Lopes Gonçalves
Business address: Bollendorfer, Echternacherbrück, Germany
Email: catarina.goncalves.marketing@gmail.com
I manage enquiries and bookings personally.
2. What information is collected?
Enquiries and correspondence
When you contact me, I receive your email address and the information you choose to share, such as your name, business, website, project details and attachments.
Please share only the information needed to explain your enquiry. Avoid sending sensitive personal information or confidential client materials at this stage.
Appointment bookings
When you book through Acuity Scheduling, the booking records include the contact details you provide, the appointment date and time, and your response to the question about what you would like to discuss.
Booking information is stored in Acuity and may also appear in my email and connected calendar.
Website use
The website and its service providers may process technical information needed to deliver and protect the service, such as your IP address, browser information and access logs.
3. Why I use your information
I use personal data for the following purposes:
To respond to enquiries and discuss potential projects. Where you are considering engaging my services personally, this can involve taking steps at your request before entering into a contract. For other business enquiries, I rely on my legitimate interest in responding to relevant correspondence and developing business relationships.
To organise introductory calls. This includes managing bookings, sending appointment information and dealing with cancellations or changes, on the same basis as the related enquiry.
To provide agreed services. Where you are the contracting client, this is necessary to perform our contract. When communicating with a client’s team, I rely on my legitimate interest in managing that business relationship.
To meet applicable legal obligations, including record-keeping obligations where relevant.
To operate and protect the website, based on my legitimate interest in maintaining a reliable and secure service. Optional cookies or similar technologies requiring consent are addressed separately below.
Fields marked as required in the booking form are needed to process your booking. Additional project information is optional unless otherwise indicated.
4. Services that process your information
I use service providers to support the website and my communications:
Squarespace: website hosting and operation.
Acuity Scheduling: appointment booking and administration.
Email Provider: email correspondence and booking notifications.
Calendar Provider: appointment scheduling and availability.
Video-call provider: introductory video calls.
These providers process information as needed to deliver their services. Their role and responsibilities depend on the service and the applicable terms.
Information may also be disclosed where required by law or where necessary to establish, exercise or defend legal claims.
5. International transfers
[COMPLETE AFTER CHECKING YOUR PROVIDERS: identify relevant transfers outside the European Economic Area, the countries or recipients involved, the applicable adequacy decision or safeguards, and how people can obtain information about those safeguards.]
6. How long I keep information
I retain information only for as long as it is needed for the purpose for which it was collected.
Enquiries that do not lead to a project: up to six months after the last substantive interaction.
Unsuccessful proposals: up to six months after discussions have ended.
Standalone introductory bookings: up to three months after the scheduled appointment, where no further discussion or project follows.
Ongoing discussions: relevant correspondence may be retained while the discussion remains active. Once it ends, the applicable period above applies.
Client projects: relevant records are retained during the engagement and afterwards where needed to meet legal obligations or establish, exercise or defend legal claims. [INSERT THE APPLICABLE PERIODS OR MORE SPECIFIC CRITERIA FOR YOUR COUNTRY.]
Where a particular record needs to be kept longer, retention is limited to the information needed for that purpose.
I review records regularly and delete information that is no longer needed from the accounts I control. Service providers may retain residual copies in backups in accordance with their own retention arrangements.
7. Cookies and similar technologies
Cookies are small files stored on your device. Websites may also use similar technologies to operate services, remember preferences or measure usage.
Google Analytics and Meta Pixel are not currently enabled on this website, and YouTube content is not currently embedded.
[COMPLETE A VERIFIED COOKIE LIST: name or category, provider, purpose and duration for the cookies used by the website and booking service.]
[ADD THE PARAGRAPH THAT MATCHES THE VERIFIED SETUP:
• If only strictly necessary technologies are used, explain their purposes.
• If optional technologies are used, explain that they remain blocked until consent, the available choices and how consent can be withdrawn.]
[ADD A WORKING “COOKIE SETTINGS” LINK IF CONSENT CONTROLS ARE USED.]
You can also manage cookies through your browser settings. Blocking some cookies may affect website or booking functionality.
8. Links to other websites
This website includes links to external websites, including portfolio references and social media pages.
When you follow a link, the destination website processes information according to its own privacy and cookie policies. This notice describes my website and services, rather than those external websites.
9. Your rights
Depending on the circumstances and applicable law, you may have the right to:
Access your personal data.
Correct inaccurate or incomplete information.
Request deletion of your information.
Request restrictions on its use.
Object to processing based on legitimate interests.
Receive certain information in a portable format.
Withdraw consent where processing relies on consent, without affecting the lawfulness of processing before withdrawal.
To make a request, contact catarina.goncalves.marketing@gmail.com. I may need limited additional information to verify your identity before responding.
You also have the right to complain to a data protection supervisory authority, particularly in the country where you habitually live, work or believe an infringement occurred.
Authority's Full Name: Catarina Gonçalves
10. Changes and contact
I may update this notice to reflect changes to the website, services or data-handling practices. The date at the top shows when it was last updated.
For questions about this notice or how I handle your information: catarina.goncalves.marketing@gmail.com