PrivacyPolicy

Data Controller

The controller responsible for the processing of personal data described in this Privacy Policy is NORINHA. NORINHA provides services as an independent web designer based in Portugal to clients in Portugal, Switzerland and other markets.

The contact details currently available on this website are set out below. Legal details that have not been publicly confirmed are not added or assumed.

Personal Data We Process

Depending on how you contact NORINHA, the following personal data may be processed:

• name
• email address
• company name
• the company's website or social media page
• information about the company's activities
• stated goals for a new website
• the content of messages or requests submitted voluntarily
• technical information that may be necessary for the operation and security of the website

Meta / Facebook Lead Ads

NORINHA may use instant forms provided by Meta Platforms through Facebook and/or Instagram. When you submit one of these forms, NORINHA receives only the information you provide in the form or choose to make available for submission.

This may include your name, email address, company, website or social media profiles, and answers to the questions included in the form.

NORINHA uses this information to review the enquiry, understand the prospective client's business and needs, prepare a proposal, create a personalised website preview or mock-up, contact the person by email about the request and — if they choose to proceed — provide the requested service.

Processing carried out directly by Meta within its platforms is also governed by Meta's own terms and privacy information. NORINHA does not control this separate processing by Meta.

Meta Privacy Policy ↗

Purposes of Data Processing

Personal data may be processed for the following purposes:

• responding to contact requests
• preparing website mock-ups, previews or proposals
• communicating with prospective clients
• performing agreed or contracted services
• maintaining the operation and security of the website
• complying with legal obligations where applicable

Legal Bases for Processing

The applicable legal basis depends on the specific processing activity, the relationship with the person concerned and the data protection law that applies. A single legal basis is not assumed to apply automatically to all processing.

Where the European Union General Data Protection Regulation applies, processing may in particular rely on the following bases:

• necessity to respond to a request made by the person or to take steps before entering into a contract
• necessity to perform a contract
• necessity to comply with a legal obligation
• an appropriate legitimate interest, such as operating the website securely or handling business enquiries, provided the person's overriding rights and interests do not take precedence
• consent, where legally required; consent may be withdrawn at any time with effect for the future

Sharing of Personal Data

NORINHA does not sell personal data.

Personal data may be processed by or made available to service providers where this is necessary to operate the business or provide the requested service. These may include the following categories:

• website hosting
• email services
• technology tools
• form services
• Meta, Facebook and Instagram in connection with their platforms and lead forms
• suppliers used to produce or provide the requested service

International Data Transfers

Some technology service providers may process personal data outside Portugal, the European Union, the European Economic Area or Switzerland. Where required by applicable law, appropriate safeguards must be used for such transfers. This Privacy Policy does not claim that a particular transfer mechanism is in place where that cannot be confirmed.

Data Retention

Personal data is retained only for as long as necessary to handle the enquiry, maintain the business relationship, perform agreed services, comply with legal obligations or resolve potential legal issues.

The specific retention period may therefore vary according to the type of data, the purpose of processing and applicable statutory obligations. Where no fixed period is required, data is reviewed according to necessity and deleted or anonymised when it is no longer needed.

Your Data Protection Rights

Depending on the law that applies, individuals may have rights in relation to their personal data. These may include:

• access
• rectification
• erasure
• restriction of processing
• objection to processing
• data portability, where applicable
• withdrawal of consent where processing is based on consent
• lodging a complaint with the competent data protection supervisory authority

Data Security

NORINHA takes appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure. However, no transmission or storage of data can be guaranteed to be absolutely secure.

Cookies and Technical Data

At the time of this update, the NORINHA portfolio's own source code does not include analytics tools, advertising pixels or non-essential cookies.

The hosting infrastructure may process technical connection data, such as IP address, time of request, browser or device information and security logs, where this is necessary to deliver, operate and secure the website.

When you open external links — for example, Facebook or the websites of featured projects — the privacy terms of those services apply. Instant forms provided directly on Facebook or Instagram are also subject to Meta's privacy information.

This information will be updated before analytics tools, advertising pixels, tracking technologies or other non-essential storage mechanisms are introduced on the website.

Changes to this Privacy Policy

This Privacy Policy may be updated when the services offered, tools used or legal requirements change. The current version will be published at the same English-language path, /privacy-policy.

Last updated: August 2026