Last updated: September 18, 2026
Who we are
This website is https://carlafrazao.com, operated by Carla Frazão, a freelance graphic designer based in Lisbon, Portugal. For any questions about this policy or your personal data, contact work@carlafrazao.com.
Hosting
This website is hosted with PTisp.
What data we collect
Contact form
When you submit the contact form on this site, we collect your name, email address, and the message you send. This data is used only to respond to your enquiry and is not added to any mailing list without your separate consent.
Live chat
This site uses a chat widget provided by Brevo. If you use it, your messages and any contact details you share are processed by Brevo on our behalf. Brevo’s own privacy policy applies to that processing.
Analytics
We use Google Analytics to understand how visitors use this site (pages viewed, general location, device type). IP addresses are anonymized. We have restricted Google from using this data for its own purposes, such as advertising. You can control analytics cookies through the consent banner shown on your first visit.
Cookies
Full details of the cookies used on this site, and how to manage your preferences, are available in our Cookie Policy.
Who we share data with
We do not sell or rent your personal data. Data may be shared with the service providers named above (Google, Brevo) strictly to provide their respective functions, under their own privacy and data processing terms.
How long we keep your data
Contact form submissions are kept for as long as needed to handle your enquiry and for a reasonable period afterward for record-keeping, unless you ask us to delete them sooner.
Your rights
Under GDPR, you have the right to access, correct, or request deletion of your personal data, to object to its processing, and to request a copy of the data you have provided to us. To exercise any of these rights, contact work@carlafrazao.com.
Where your data is sent
Our service providers (Google, Brevo) may process data outside the European Economic Area. Where this happens, they do so under legally recognized data transfer safeguards, such as the EU-US Data Privacy Framework or standard contractual clauses.