Privacy Policy

Last updated: 27 October 2026

1. Who I Am

This website, diogo.design, is operated by Diogo Ferreira, an independent design professional based in Portugal. When this policy refers to 'I', 'me', or 'my', it means Diogo Ferreira as the data controller responsible for your personal information.

2. What Information I Collect

I collect personal information in two ways:

Information you provide directly

When you send me a message through the contact form on this website (hosted by Tally), I collect:

  • Your name

  • Your email address

  • The contents of your message

Information collected automatically

This website does not use analytics or tracking tools. When you visit it, the hosting provider (Squarespace) records standard server logs as part of normal operations, which may include:

  • Pages you visit and time spent on each page

  • The date and time of your visit

  • The device, browser, and operating system you use

  • How you arrived at this site (referral source)

  • Your IP address

3. Why I Collect This Information

I use your information for the following purposes:

  • To respond to your enquiries. When you submit the contact form, I use your name and email to reply to your message. The legal basis for this is my legitimate interest in communicating with potential clients and collaborators (GDPR Article 6(1)(f)).

  • To keep the website secure and running. Server logs are used only to operate and protect the site, not to identify visitors. The legal basis for this is my legitimate interest in maintaining a secure website (GDPR Article 6(1)(f)).

4. Cookies and Tracking

This website only uses cookies that are strictly necessary for it to work, such as a security cookie that protects forms against misuse. These cookies do not identify you personally and do not track your browsing. No analytics, advertising or tracking cookies are used, so no cookie consent banner is shown.

5. Who I Share Your Data With

I do not sell, rent, or trade your personal information. Your data may be shared with the following third-party service providers, solely for the purposes described in this policy:

Tally (Tally BV, Belgium) hosts the contact form and processes the details you submit through it, within the EU. You can review Tally’s privacy policy at tally.so/help/privacy-policy.

Calendly (Calendly LLC, United States) handles call bookings. When you book a call, it processes your name, your email address and anything you write in the booking form, so it can schedule the meeting and send reminders. Calendly is certified under the EU-U.S. Data Privacy Framework, which covers the transfer of this data to the United States. You can review Calendly’s privacy notice at calendly.com/privacy.

Hosting provider. The company that hosts this website may process server logs containing your IP address and request data as part of normal operations.

6. How Long I Keep Your Data

  • Contact form submissions: I retain your name, email, and message for up to 12 months after our last communication, unless there is an ongoing business relationship or legal reason to keep it longer.

  • Server logs: kept by the hosting provider for a limited period under its own retention policy. I do not use them to identify visitors.

7. Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

Access the personal data I hold about you

Rectify any inaccurate or incomplete data

Erase your personal data ('right to be forgotten')

Restrict how I process your data

Object to processing based on legitimate interest

Data portability, receiving your data in a structured, machine-readable format

Withdraw consent at any time where processing is based on consent (this does not affect the lawfulness of processing before withdrawal)

To exercise any of these rights, please contact me using the details below. I will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Protecção de Dados (CNPD), at www.cnpd.pt.

8. Data Security

I take reasonable measures to protect your personal information from unauthorised access, loss, or misuse. These measures include using secure (HTTPS) connections on this website and limiting access to personal data to myself only.

However, no method of transmission over the internet is completely secure. While I do my best to protect your data, I cannot guarantee absolute security.

9. Third-Party Links

This website may contain links to external sites that are not operated by me. I have no control over the content or privacy practices of those sites and accept no responsibility for them. I encourage you to review the privacy policy of any site you visit.

10. Changes to This Policy

I may update this privacy policy from time to time to reflect changes in my practices or for legal, regulatory, or operational reasons. When I make changes, I will update the 'last updated' date at the top of this page. I encourage you to review this policy periodically.

11. Contact Me

If you have any questions about this privacy policy or how I handle your personal data, you can reach me at:

Diogo Ferreira

Website: www.diogo.design

Email: diogodotdesign@gmail.com