Privacy
policy.

When you contact us or submit a project inquiry, we may collect information such as your name and email address, company or brand name, project details, and budget, timing or other information you choose to provide.

If we work together, we may also process information related to project communication, contracts, invoicing, payments and files supplied as part of the project.

Our website may also collect limited technical information such as browser type, device type, pages visited and approximate location through privacy-focused analytics.

• Respond to inquiries.
• Prepare proposals and manage projects.
• Communicate with clients and collaborators.
• Process invoices and maintain business records.
• Improve the website and understand how it is used.
• Comply with applicable legal and accounting requirements.

We rely on your request to take steps before any contract (Article 6(1)(b) GDPR), on our legitimate interest in running and improving the site (Article 6(1)(f)), and on legal obligations where records must be kept (Article 6(1)(c)).

We don’t sell your personal information, we don’t automatically add people who contact us to marketing mailing lists, and we don’t make automated decisions about you.

We use privacy-focused analytics to understand general website usage and performance. At the time of this policy, we use Umami for website analytics.

This helps us understand information such as which pages are visited and how visitors find the site, without using the website to create advertising profiles or track visitors across unrelated websites. It doesn’t use cookies, and the site sets none of its own.

We may use third-party services to operate our website and manage our work, including services for:

• Website hosting.
• Analytics.
• Email.
• Cloud storage.
• Project management.
• Accounting and administration.

These providers may process limited personal information where necessary to provide their services. Where data is processed outside the European Economic Area, appropriate safeguards may apply in accordance with GDPR requirements.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

Project and client information may be retained for an appropriate period after a project has ended for administrative, contractual and accounting purposes. Certain financial records may need to be retained for longer where required by Portuguese law.

Under the GDPR, you may have the right to:

• Access personal information we hold about you.
• Correct inaccurate information.
• Request deletion in certain circumstances.
• Restrict or object to certain processing.
• Withdraw consent where processing is based on consent.
• Request data portability where applicable.

To exercise any of these, email hello@soleestudio.eu. We’ll reply within one month.

You also have the right to lodge a complaint with the relevant data protection authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD) at cnpd.pt.

We take reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse or disclosure.

However, no internet transmission or digital storage system can be guaranteed to be completely secure.

Solé Studio is the trading name used by James Matthew Devine, a sole trader operating in Portugal. For GDPR purposes, James Matthew Devine is the data controller for the personal information described in this policy.

For privacy-related questions or requests, contact Solé Studio, Porto, Portugal, at hello@soleestudio.eu.

We may update this Privacy Policy when our website, services or legal requirements change. The date at the top of this page shows when the policy was last updated.