Privacy Policy
01Who we are
ALL WAYS BUSINESS is a digital product studio operated by Natasha Silvestre, based in Portugal. We design and build digital products, platforms, and owned infrastructure for businesses across Europe.
For the purposes of the GDPR, ALL WAYS BUSINESS acts as a data controller for data collected via this website (allways.digital). Our supervisory authority is the CNPD — Comissão Nacional de Proteção de Dados.
Contact: hello@allways.digital
02Data we collect
We collect data only when you actively provide it or when it is necessary to operate this website.
| Category | Data points | Source |
|---|---|---|
| Contact enquiries | Name, email, company, project description, budget range | Contact form |
| Newsletter | Email address | Newsletter signup |
| Cookie consent | Consent status, timestamp, categories granted | Cookie banner |
| Analytics | Page views, referrers, country (no personal identifiers) | Plausible (cookieless) |
| Analytics (optional) | Device type, session data (GA4 — only post-consent) | GA4 with Consent Mode v2 |
| DSAR requests | Name, email, request type | GDPR request form |
03How we use your data
We use personal data for the following purposes:
- To respond to project enquiries and assess fit
- To send newsletters and studio updates (only if subscribed)
- To improve website content and user experience via aggregate analytics
- To comply with legal obligations under Portuguese and EU law
- To process and respond to Data Subject Access Requests within the statutory 30-day period
04Legal basis
| Processing activity | Legal basis |
|---|---|
| Contact form responses | Legitimate interest (Art. 6(1)(f)) — responding to pre-contractual enquiries |
| Newsletter delivery | Consent (Art. 6(1)(a)) — freely given, specific, opt-in |
| Cookieless analytics (Plausible) | Legitimate interest (Art. 6(1)(f)) — no personal data processed |
| GA4 analytics | Consent (Art. 6(1)(a)) — only active after explicit cookie consent |
| GDPR/DSAR requests | Legal obligation (Art. 6(1)(c)) |
| Financial records | Legal obligation (Art. 6(1)(c)) — Portuguese fiscal law |
05Data sharing
We do not sell, rent, or trade your personal data. We share data only with processors operating under standard contractual clauses or equivalent safeguards:
- Vercel Inc. (USA) — hosting and serverless infrastructure.
- Supabase Inc. (USA) — database and authentication.
- Resend Inc. (USA) — transactional email delivery.
- Plausible Analytics (EU) — cookieless analytics.
- Google Ireland Ltd. — GA4 analytics, only post-consent.
We never allow third parties to use your data for their own marketing or profiling purposes.
06Cookies & tracking
This website uses a two-tier approach to analytics. Plausible loads immediately (cookieless). GA4 loads only after explicit consent via cookie banner.
For full details of cookies used, durations, and opt-out options, see the Cookie Policy.
07Data retention
| Data type | Retention period | Basis |
|---|---|---|
| Contact form submissions | 3 years | Legitimate interest |
| Newsletter subscribers | Until unsubscription + 1 year | Consent |
| Cookie consent records | 3 years | Legal obligation |
| DSAR records | 5 years | Legal obligation |
| Financial/invoicing records | 10 years | Portuguese fiscal law |
08Your rights
Under GDPR, you have rights regarding your personal data. To exercise these rights, use our DSAR form or email hello@allways.digital.
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to restriction (Art. 18)
- Right to portability (Art. 20)
- Right to object (Art. 21)
- Right to withdraw consent
- Right to lodge a complaint with CNPD
09International transfers
Some data may be transferred outside the EEA. In all cases, safeguards are in place, including Standard Contractual Clauses approved by the EU Commission.
Plausible data is processed in the EU. Supabase data is configured to use EU region where available.
10Contact & complaints
For any questions about this policy or to exercise your rights:
- Email: hello@allways.digital
- WhatsApp: +351 910 769 700
- DSAR form: allways.digital/gdpr/request
We're transparent about data.
Questions about this policy? Contact us at hello@allways.digital