1. Who we are

This site is run by me, Joana Parente. I’m a freelance web developer and digital strategist based in Faro, Portugal. I design and build websites for small businesses, and this policy explains how I handle your data when you visit or interact with this site.

Data controller: Joana Isabel Ramos Parente, Faro, Portugal.

Contact: hello@joanaparente.com

2. What data we collect and why

There are three ways this site might collect your data. Here’s each one, what it involves, and why.

Contact form

When you send me a message through the contact form, I collect your name, email address, company (if you choose to share it), project type, budget range, timeline (optional), your message, and language preference (if selected). The legal basis for processing this data is legitimate interest. You reached out to me. Responding to your inquiry is a reasonable thing to do with the information you just gave me. The data is low-risk (name, email, a project description), directly relevant to a conversation you started, and I don’t use it for anything else.

Lead magnet subscription

If you download a free resource and subscribe to my mailing list, I collect your email address, first name (if you provide it), your language, and which resource you downloaded. The legal basis here is consent. You opted in. You chose to subscribe, you chose what to share. Nothing happens without that explicit action on your part.

Analytics and performance

This site uses analytics tools to understand how people use it (which pages get visited, what gets clicked, how long things take to load). That means browsing behaviour, page views, click events, IP address, user agent, and device type. The legal basis is consent, given through the cookie banner before any tracking loads. If you don’t say yes, nothing tracks. The site works exactly the same either way.

3. Do you have to give us your data?

No. Everything is voluntary.

If you use the contact form but don’t provide your name, email, and a message, I simply can’t reply to you. That’s the only consequence.

If you don’t subscribe to a lead magnet, you don’t get the resource. That’s it.

If you decline analytics cookies, nothing changes about your experience on the site. Every page, every feature, works the same.

4. Who we share your data with

I don’t sell your data. I don’t share it with anyone for marketing purposes. But I do use a handful of services to keep the site running, and some of them process data on my behalf. Here’s who they are and what they do.

Resend handles transactional email. When you submit the contact form, Resend delivers that message to my inbox. They’re based in the USA. Their privacy policy is at resend.com/legal/privacy-policy.

MailerLite handles email marketing for lead magnet subscribers. They’re based in Lithuania, with servers in Germany and the Netherlands. Your subscriber data stays in the EU. Their privacy policy is at mailerlite.com/legal/privacy-policy.

Google Analytics 4 provides analytics so I can understand how the site is used. Google is based in the USA. Their privacy policy is at policies.google.com/privacy.

Vercel hosts this website and provides analytics and speed monitoring. They’re based in the USA. Their privacy policy is at vercel.com/legal/privacy-policy.

Sanity is the content management system behind this site. It stores and delivers website content (text, images, page structure), but it does not receive or process any visitor personal data. I’m including it here for transparency, not because it touches your data. Their privacy policy is at sanity.io/legal/privacy.

5. International transfers

Resend, Google, and Vercel are headquartered in the United States. Transfers of personal data to the US are covered by Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework. These are the standard legal mechanisms the EU recognises for protecting data that leaves Europe.

MailerLite stores EEA subscriber data in the EU (Germany and the Netherlands). No international transfer involved.

6. How long we keep your data

Contact form submissions stay in my email inbox for as long as they’re relevant to a potential or active project. Once a conversation has run its course and there’s no ongoing engagement, I delete them.

MailerLite subscribers remain on the list until they unsubscribe. Every email includes an unsubscribe link. One click and you’re off.

Analytics data is retained according to default settings: 26 months for Google Analytics, and per Vercel’s standard retention for their analytics and speed monitoring tools.

7. Your rights

Under GDPR, you have eight rights. Here they are, plainly:

1. Right of access. You can request a copy of any data I hold about you.

2. Right to rectification. If something’s wrong, you can ask me to correct it.

3. Right to erasure (the “right to be forgotten”). You can ask me to delete your data.

4. Right to restriction of processing. You can ask me to limit how I use your data.

5. Right to data portability. You can ask for your data in a format you can take elsewhere.

6. Right to object to processing. You can object to how I’m using your data.

7. Rights related to automated decision-making. Not applicable here. I don’t do any profiling or automated decisions.

8. Right to withdraw consent at any time. Withdrawing consent doesn’t affect anything that was lawfully processed before you withdrew it.

These are your rights. Use them.

8. How to exercise your rights

Email me at hello@joanaparente.com. I’ll respond within 30 days.

If you want to withdraw cookie consent, use the cookie banner settings on this site (the same banner you saw on your first visit).

If you want to unsubscribe from my mailing list, use the unsubscribe link at the bottom of any email. It’s always there.

9. Cookies

This site uses three categories of cookies.

Essential cookies handle basic functionality like session management and language preference. These don’t need your consent because the site needs them to work properly. They don’t track you.

Analytics cookies power Google Analytics 4, Vercel Analytics, and Vercel Speed Insights. They help me understand which pages people visit, how long they stay, and whether the site is fast enough. These require your consent before they load. If you say no, they never activate.

Marketing cookies are used by MailerLite for tracking engagement with lead magnet emails (opens, clicks). These also require your consent.

You can manage your preferences through the cookie banner that appears on your first visit. You can also change your mind at any time through the cookie settings, or by adjusting your browser’s cookie settings. Withdrawing consent doesn’t break the site. Everything still works.

10. Complaints

If you’re unhappy with how I’ve handled your data, you have the right to complain to the Portuguese data protection authority: the CNPD (Comissão Nacional de Proteção de Dados), at cnpd.pt.

That said, I’d genuinely appreciate it if you emailed me first at hello@joanaparente.com. I’m one person, not a corporation. If something went wrong, I want to know about it and fix it. The CNPD is always there if you need them.

11. Updates

This policy is reviewed whenever my processing activities change (a new tool, a new form, a new way data flows). The effective date is shown at the top of the page. I don’t have a notification system for policy updates. If you’re curious whether anything changed, check back.