Privacy Policy

Studio FLACH is a trade name jointly used by Lucas Antonio Flach and Stephanie Alves Flach, two self-employed independent professionals established in Portugal. Studio FLACH is not a separate company or legal entity.

Lucas Antonio Flach and Stephanie Alves Flach are joint controllers of the personal data described in this policy. They jointly determine the purposes and means of processing, share responsibility for complying with applicable data protection law, and handle data protection requests through the contact details below. You may exercise your rights against either controller.

• Joint controllers: Lucas Antonio Flach and Stephanie Alves Flach.
• Trading name: Studio FLACH.
• Professional status: Self-employed independent professionals in Portugal.
• Professional address: Rua dos Caleiros, n.º 89, 1.º Andar, 4900-512 Viana do Castelo, Portugal.
• Email: hello@studioflach.com.
• Telephone: +351 939 097 715.

This Privacy Policy explains how personal data is handled when you visit studioflach.com, submit the contact form, contact Studio FLACH by email or telephone, arrange a call, request information about a project, or become a client.

It applies to website visitors, prospective clients, current and former clients, collaborators, suppliers, and other people who communicate with Studio FLACH in a professional context. Studio FLACH provides services exclusively for business and professional purposes.

When you submit the contact form or contact us directly, we may collect your name, work email address, telephone number, company or practice, current website, location, preferred service, project needs, reason for starting the project, expected investment, preferred start date, additional notes, and any other information you choose to provide.

The contact form is hosted with the website on Vercel. Resend processes the submitted information to deliver the enquiry to Studio FLACH and send the confirmation email requested by the sender. Namecheap Private Email processes messages sent to and from hello@studioflach.com.

When you open the Calendly scheduler and arrange a call, Calendly may collect your name, email address, time zone, booking selections, answers supplied during scheduling, and technical information associated with your use of its service.

If you become a client, we may also process proposal, contract, project, communication, payment, invoicing, and accounting information. Payments are processed through Stripe. Studio FLACH does not receive or store full payment-card details.

Vercel and related hosting infrastructure may automatically process limited technical information needed to deliver and secure the website, including IP address, browser and device information, requested pages, timestamps, and server logs.

Please do not send special-category or highly sensitive personal data unless it is genuinely necessary and we have agreed in advance how it should be handled.

We process personal data only for specified purposes and where a lawful basis applies.

• To answer enquiries, assess a proposed project, arrange a call, prepare a proposal, and take steps requested before a contract is entered into. The legal basis is taking pre-contractual steps at your request.
• To provide agreed services, manage projects and the client relationship, communicate about delivery, receive payment, invoice, and administer a contract. The legal basis is performance of a contract.
• To maintain appropriate professional records, protect the website, prevent misuse, operate and improve our business, and establish, exercise, or defend legal claims. The legal basis is our legitimate interests, provided those interests do not override your rights.
• To comply with tax, accounting, regulatory, and other legal duties. The legal basis is compliance with a legal obligation.
• To send optional marketing communications only where you have requested them or another lawful basis applies. Where consent is used, you may withdraw it at any time.

At the effective date of this policy, Studio FLACH does not load Google Analytics, the LinkedIn Insight Tag, or other analytics or advertising trackers on its public website pages. Google Analytics and the LinkedIn Insight Tag are planned tools, not active tools. They will not be activated unless the website first provides any notice and consent controls required by law and this policy is updated to explain their use.

Calendly is opened only after you choose to use the scheduling tool. Calendly may then use cookies, local storage, log data, and similar technologies under its own controls and policies. Calendly provides Cookie Settings inside its interface and explains its processing at calendly.com/legal/privacy-notice.

Essential technical storage and server logs may be used where necessary to display, secure, and operate the website. These technologies are not used by Studio FLACH to create advertising profiles.

We disclose personal data only when reasonably necessary for the purposes described in this policy. We do not sell or rent personal data.

• Vercel, for website hosting, delivery, infrastructure, and security.
• Resend, for processing contact-form submissions and sending related emails.
• Namecheap Private Email, for business email hosting and delivery.
• Calendly, when you choose to arrange a meeting.
• Stripe, when a client makes a payment.
• Accountants, legal or professional advisers, and other suppliers where their work requires access to relevant information.
• Public authorities, courts, or regulators where disclosure is required by law or necessary to protect legal rights.
• Google Analytics and LinkedIn Insight Tag only if those tools are activated in the future after the required transparency and consent measures are in place.

Studio FLACH is established in Portugal and may use providers that process personal data outside Portugal or outside the European Economic Area, including Vercel, Resend, Google, LinkedIn, Calendly, Namecheap, and Stripe.

Where a restricted international transfer takes place, it must rely on a mechanism permitted by applicable data protection law, such as an adequacy decision, the EU-US Data Privacy Framework where applicable, approved standard contractual clauses, or another valid safeguard. The providers may update their processing locations and safeguards, so their current privacy and data-processing notices should also be reviewed for details.

Enquiries and prospective-client information are normally retained for up to 24 months after the last contact. They may be deleted earlier following a valid request, or retained under a different period if the person becomes a client or a legal obligation requires continued retention.

Calendly booking information is normally retained for up to 24 months after the booking, meeting, or last contact. If the person becomes a client, information needed for the commercial relationship follows the client-record retention period.

Client, project, contract, and related communication records are retained during the commercial relationship and, where necessary for contractual, tax, accounting, or legal-claims purposes, for up to 10 years after the relationship ends. Information that no longer has a commercial or legal purpose may be deleted earlier.

Invoices, receipts, and accounting records are retained for 10 years in accordance with applicable Portuguese tax and accounting obligations.

When personal data is no longer required, it is deleted, anonymised, or securely archived where continued retention is legally required.

Subject to the conditions in applicable law, you may ask for access to your personal data, correction of inaccurate data, erasure, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent at any time without affecting earlier lawful processing.

You may exercise these rights by emailing hello@studioflach.com. We may need to verify your identity before acting on a request. We normally respond within one month, although the law permits an extension in certain complex cases.

You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt. We would appreciate the opportunity to address your concern directly first, but this does not limit your right to complain.

Studio FLACH does not use personal data collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects.

We use reasonable organisational and technical measures appropriate to the nature of the information we handle. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed.

If a personal data breach creates a risk to individuals, we will assess it and make any notification required by applicable law.

The website and services are intended for businesses and adult professionals. We do not knowingly solicit personal data from children. If you believe a child has provided personal data to us, contact hello@studioflach.com so that we can review and delete it where appropriate.

The website may link to third-party websites and services. Their privacy practices are controlled by their own operators, and this policy does not replace their notices. You should review the relevant third-party policy before providing personal data.

We may update this Privacy Policy when the website, our services, providers, or legal obligations change. The current version will be published on this page with its effective or last-updated date.

Questions, requests, and concerns about this Privacy Policy or the use of personal data may be sent to hello@studioflach.com, by telephone at +351 939 097 715, or by post to Rua dos Caleiros, n.º 89, 1.º Andar, 4900-512 Viana do Castelo, Portugal.