Your personal data
Data controller
The data controller must be identified before enquiries are enabled. · [email protected]
Enquiry form data
Name, phone number and project location allow a response to your enquiry. Email, photographs and building details are optional. The form may also submit the type of work, estimated area, described issues, intended timing, enquiry language and free text.
An exact address is not needed at first contact. Avoid including people or documents unrelated to the assessment.
Purposes and basis
Information is used to respond to your enquiry, prepare a visit and produce a proposal. It is not sold or used to send advertising. Data necessary for a quotation is processed for the pre-contractual steps you request, under Article 6(1)(b) of the GDPR. Contact permission applies only to this enquiry and does not authorise advertising. You may ask us to stop following up your enquiry.
Retention
Data and photographs received through the form are retained for up to 6 months after receipt, then deleted.
If you commission work from Pintura Certa, records needed for the contract, invoicing and legal obligations are retained separately. The period above applies to the initial enquiry form record.
Providers and technical information
Enquiries use Cloudflare Pages and Cloudflare R2 storage.
Hosting processes technical information needed to deliver and protect the website, including IP addresses. Request rate limiting uses this information temporarily when enabled.
Measurement tools load only with your permission. Campaign parameters may accompany an enquiry. The code does not send your name, phone number, email or photographs to those tools. Cookies and preferences.
When professionals need to take part in the visit or the work, only information needed for their intervention is shared. Pintura Certa continues to handle your enquiry.
Your rights
You can request access, correction, erasure, restriction, portability or objection using the listed contact details. You can also lodge a complaint with the Portuguese data protection authority. CNPD.
Visit and contact measurement
With your permission, the website records visits, WhatsApp or phone clicks and quote form steps in the events table of our Airtable CRM. A click indicates contact intent; a quote request is counted as received only after the server has stored it.
Events include the date, page without URL parameters, language, button position, selected service and, where relevant, photo count or error category. They contain no name, phone, email, project description, photographs, IP address or persistent visitor identifier. The hosting provider processes technical connection information to deliver and protect the service.
Airtable receives events through the website server as a storage provider. Events are manually reviewed for deletion after 180 days. See the privacy policy for providers, transfers and your rights.
Enquiry follow-up and working copies
We use Airtable to organise commercial follow-up of enquiries. Each record contains the reference, contact details supplied, location, service, project details, dates, follow-up status and, where available, the source of the visit. This does not subscribe you to advertising.
The form integration sends Airtable the number of photographs and the private dossier reference, not image files. Originals remain in Cloudflare R2. Photographs may also be attached to internal notifications sent through Brevo and retained in the team’s email inbox. The team may add photographs needed for follow-up to a project dossier.
The period stated in this policy for the initial enquiry also applies to its working copies. Deletion from R2 does not automatically delete copies in Airtable or email; those copies are managed separately. Access should be limited to people authorised to handle the enquiry.