Privacy policy

Introduction

Olibeli is a Portugal-based web development studio. This privacy policy explains how we collect, use, and protect personal data when you visit olibeli.com or contact us through the site.

We keep this policy direct and specific. If anything here is unclear, email us and we will explain it in plain language.

Who is responsible for your data

The data controller for personal data described in this policy is Olibeli, Lda, based in Portugal.

For privacy questions or requests relating to your personal data, contact us at info@olibeli.com.

What personal data we collect

We only collect personal data that is relevant to running this website and responding to inquiries. Depending on how you interact with us, this may include:

• Contact form submissions: your name, email address, optional company name, project type, and project details.
• Direct email correspondence: any information you choose to include when you write to info@olibeli.com.
• Technical data: standard server and security logs generated when you visit the site, such as IP address, browser type, referring page, and request timestamps. These are processed by our hosting provider.
• Theme preference: if you use the light or dark mode toggle, your choice is stored in your browser's local storage under the key olibeli-theme. This stays on your device and is not sent to our servers.

Cookies and similar technologies

We use a small number of cookies and browser storage to operate this website and remember your choices.

• Essential cookie (olibeli-locale): stores your language preference for up to one year. SameSite=Lax.
• Functional storage (olibeli-theme): stores your light or dark theme preference in your browser's local storage. This stays on your device and is not sent to our servers.
• Consent cookie (olibeli-consent): stores whether you accept or reject optional analytics cookies for up to one year. SameSite=Lax.
• Analytics: we do not load Google Analytics or similar analytics tools unless you accept analytics cookies in the banner. If you reject non-essential cookies, analytics scripts remain blocked.
• Changing your choice: use Cookie settings in the site footer or the cookie banner when it appears.

What we do not collect

We do not use advertising cookies, marketing pixels, or non-essential third-party tracking unless you consent to analytics. We do not add you to newsletters or mailing lists when you submit the contact form.

How we use your data

We use personal data only for clear, limited purposes:

• To read and respond to project inquiries and other messages you send us.
• To operate, maintain, and protect the website, including detecting abuse and troubleshooting technical issues.
• To keep reasonable business records of conversations that may lead to a project engagement.
• To comply with legal obligations where they apply.

Legal bases for processing

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases:

• Legitimate interests: to respond to inquiries, secure the website, and maintain ordinary business records, where those interests are not overridden by your rights.
• Steps at your request before a contract: when you contact us about a potential project, we process your details to assess the request and reply with next steps.
• Legal obligation: where we must retain or disclose information to comply with applicable law.
• Consent: when you accept analytics cookies, we process associated usage data based on your consent. You may withdraw consent at any time through Cookie settings in the footer.

Who we share data with

We do not sell personal data. We share it only with service providers that help us run the website and handle inquiries, and only to the extent needed for those services:

• Brevo - delivers contact form submissions to our inbox by email. Privacy policy: https://www.brevo.com/legal/privacypolicy/
• Vercel - hosts the website and processes technical logs required to deliver pages securely. Privacy policy: https://vercel.com/legal/privacy-policy

We require these providers to handle personal data only on our instructions and in line with applicable data protection law.

International transfers

Some of our service providers may process personal data outside Portugal. Where that happens, we rely on appropriate safeguards recognised under GDPR, such as standard contractual clauses approved by the European Commission, or equivalent protections offered by the provider.

How long we keep your data

We keep contact form submissions and related email correspondence for as long as needed to respond, follow up on a potential project, and maintain reasonable business records - typically up to 24 months unless a longer period is required by law or an active client relationship.

Server logs are retained according to our hosting provider's standard retention periods, which are kept as short as practicable for security and operations.

Language and consent cookies (olibeli-locale, olibeli-consent) are stored for up to one year unless you clear them sooner in your browser.

Theme preferences stored in your browser remain on your device until you clear your browser storage or change the setting.

Your rights

If GDPR applies to our processing of your personal data, you have the right to:

• Request access to the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data in certain circumstances.
• Request restriction of processing in certain circumstances.
• Request a copy of your data in a portable format where applicable.
• Object to processing based on legitimate interests.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email info@olibeli.com. We may need to verify your identity before responding.

You also have the right to lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), at https://www.cnpd.pt/

Security

We apply proportionate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls on our systems, and careful selection of infrastructure providers.

No method of transmission or storage is completely secure. If you believe your interaction with us has been compromised, contact us promptly at info@olibeli.com.

Children

This website is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this privacy policy when our services, legal requirements, or data practices change. When we do, we will revise the last updated date at the top of this page.

If a change materially affects how we use personal data, we will take appropriate steps to inform you.

Contact us

Questions about this policy or how we handle personal data? Email info@olibeli.com and we will get back to you.