Privacy Policy
Last updated: 3 September 2026
The short version. There is no sign-up, no form and no selling of data. What exists is audience measurement and advertising: Google Analytics, Google Ads and the Meta Pixel, all conditional on your consent. If you click an affiliate link, the destination store sets a cookie of its own to credit the referral.
1. Who is responsible for your data
creativesolutions.pt is operated by Pedro Macedo, sole trader, tax identification number 133495256, in Portugal. For the purposes of the General Data Protection Regulation (GDPR, EU 2016/679) and the Brazilian General Data Protection Law (LGPD, Law 13.709/2018), Pedro Macedo is the controller of the personal data processed through this site.
The site is operated from Portugal, which means your data is processed in the European Union under European rules — in several respects a stricter standard than United States law requires.
Privacy contact: [email protected].
2. What we collect
There is no account area, login, newsletter or form on this site. The data that may be processed is:
- Technical access data. IP address, browser type and version, operating system, language, pages visited, date and time, and where the visit came from (referring site or ad). Recorded automatically by the server hosting the site and by the measurement tools.
- On-site behaviour. Pages viewed, time on page, scrolling, clicks on buttons and outbound links — collected by cookies and similar technologies, only if you consent.
- Advertising identifiers. Pseudonymised identifiers created by Google and Meta to measure ad performance and show relevant advertising, also subject to consent.
- Anything you send us by email. If you write to us, we process the email address and the content of the message in order to reply.
We do not collect sensitive data, we do not build credit profiles, and we do not knowingly process data from minors.
3. What we use it for, and on what legal basis
| Purpose | Data | Legal basis (GDPR) | Legal basis (LGPD) |
|---|---|---|---|
| Serving the pages and keeping the site secure and stable | Technical access data | Legitimate interest — Art. 6(1)(f) | Legitimate interest — Art. 7, IX |
| Measuring audience and understanding what content works | On-site behaviour (Google Analytics) | Consent — Art. 6(1)(a) | Consent — Art. 7, I |
| Measuring conversions and running ads and remarketing | Advertising identifiers (Google Ads, Meta) | Consent — Art. 6(1)(a) | Consent — Art. 7, I |
| Replying to messages you send us | Email address and message content | Legitimate interest — Art. 6(1)(f) | Legitimate interest — Art. 7, IX |
| Meeting legal obligations and responding to authorities | Whatever data applies to the case | Legal obligation — Art. 6(1)(c) | Legal obligation — Art. 7, II |
Everything that depends on consent is switched on only after you accept in the cookie notice, and can be withdrawn at any time — see the Cookie Policy.
4. Cookies and similar technologies
We use first-party and third-party cookies. Strictly necessary ones always run; analytics and advertising ones only after your consent. The full list, with the purpose and lifetime of each, is in the Cookie Policy.
5. Who we share with
We do not sell, rent or trade personal data. We share only with providers that need it for the site to work:
- Netlify — hosting and page delivery.
- Google Ireland Limited — Google Analytics, Google Tag Manager and Google Ads.
- Meta Platforms Ireland Limited — Meta Pixel, for measurement and ad audiences.
- Affiliate networks and programmes — when you click an affiliate link, the advertiser’s network is told the visit came from here, so the commission can be attributed.
We may also disclose data where legally required, to comply with a court order or a request from a competent authority.
6. International transfers
Some of those providers process data outside the European Economic Area and outside Brazil, including in the United States. Where that happens, transfers rely on the Standard Contractual Clauses approved by the European Commission and, where applicable, on certification under the EU-U.S. Data Privacy Framework. For data subjects in Brazil, the safeguards in Articles 33 and following of the LGPD apply.
7. How long we keep it
- Server access logs: up to 12 months.
- Google Analytics data: up to 14 months from the last interaction.
- Google Ads and Meta advertising data: for the periods those platforms set, typically up to 13 months.
- Email messages: up to 24 months after the last exchange, unless a legal obligation requires longer.
8. Security
The site is served over HTTPS only. We take reasonable technical and organisational measures to protect data against unauthorised access, loss or improper disclosure. No system is infallible, but we undertake to notify affected people and the competent authorities (ANPD and/or CNPD) of relevant incidents within the legal deadlines.
9. Your rights
You may exercise the following rights at any time:
- Confirmation and access — find out whether we process your data and obtain a copy.
- Rectification — correct incomplete or out-of-date data.
- Erasure — ask for deletion of data processed on the basis of consent.
- Anonymisation or blocking — where data is unnecessary or processed unlawfully.
- Portability — receive the data in a structured, commonly used format.
- Objection and restriction — object to processing based on legitimate interest, or ask that it be restricted.
- Withdrawal of consent — at any time, without affecting the lawfulness of processing carried out before.
- Information about sharing — find out which public and private bodies we share data with.
To exercise any of these, write to [email protected]. We answer within 15 days. We may ask for additional information to confirm your identity before acting on a request.
If you are not satisfied with the response, you may complain to the CNPD (the Portuguese data protection authority) or the ANPD (the Brazilian one).
10. Residents of the United States
We apply the same standard to everyone: no sale of personal data, no sharing for cross-context behavioural advertising beyond the ad measurement described above, and no data broking. Residents of California and of other states with comparable privacy statutes may additionally request to know what personal information has been collected, request its deletion or correction, and opt out of any sale or sharing. We do not sell personal information as those laws define the term.
The practical control is the same one everyone else has: the cookie notice. Rejecting analytics and advertising there stops the identifiers being set at all, which is stronger than an opt-out after the fact. To make a formal request, write to [email protected]. We will not discriminate against you for exercising any of these rights.
This site does not respond to browser “Do Not Track” signals, because there is no agreed standard for them. Global Privacy Control signals, where your browser sends them, are honoured through the same consent mechanism.
11. Affiliate links and third-party sites
This site contains affiliate links. When you click one you leave creativesolutions.pt and become subject to the privacy policy of the destination site, over which we have no control. We recommend reading it before providing any data. Details of our commercial relationship with advertisers are on the Affiliate Disclosure page.
12. Children
The content on this site is intended for people aged 18 and over. We do not knowingly collect data from minors. If we learn that we have received data from a minor without the consent of a parent or guardian, we delete it.
13. Changes to this policy
We may update this policy whenever the tools we use or the applicable law change. The date at the top always indicates the version in force. Material changes will be flagged on the site itself.
14. Contact
Pedro Macedo — TIN 133495256
Portugal
[email protected]