Privacy policy.

1. Who is responsible

EUPHORICQUARTZ - UNIPESSOAL LDA, a Portuguese single-member private limited company, with registered office at Rua da Barca, 6, 3830-005 Aveiro, Portugal, registered with the Commercial Registry Office under the single registration and tax identification number 519567927.

Contact: hello@euphoricquartz.com · +351 967 607 855.

We have no data protection officer, as we are not required to appoint one: privacy questions are handled directly by the managing partner, at the email above.

2. What we collect

• Contact form. Your name, email address and the project description you write. Some technical data travels with it: the language and page you sent it from (to send you back there) and when the page was opened (to filter automated submissions). An invisible field acts as a trap for bots; a person never fills it in.
• Email and phone. If you contact us directly, what you send us: your address or number and the content of your message.
• Technical access data. As with any website, the server receives your IP address, browser type and the pages requested. The site is served by Cloudflare, which processes this data to deliver the pages and protect the site from abuse.

3. Cookies and tracking

We use no analytics, advertising or social media cookies, and no statistics tools. The fonts and every file on the site are served by the site itself, with no requests to third parties. Cloudflare may set cookies that are strictly necessary for security (for example, to tell people from bots); these do not require consent and are not used to identify you.

The links to Instagram, Facebook and LinkedIn only take you to those sites when you click them; from there, their privacy policies apply.

4. What we use it for

• Answering your request and preparing a proposal — steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
• Performing the contract, if the project goes ahead — performance of a contract (Article 6(1)(b)).
• Meeting legal obligations, such as invoicing — legal obligation (Article 6(1)(c)).
• Keeping the site secure and filtering abusive submissions — legitimate interest (Article 6(1)(f)).

We do not use your data for marketing, we do not sell it, and we make no automated decisions and build no profiles.

5. Who processes it for us

We use two processors, under data processing agreements:

• Cloudflare, Inc. — hosting the site, processing the form and delivering the message to our mailbox.
• Google (Google Workspace) — the mailbox where messages are received and answered.

These providers may process data outside the European Economic Area, notably in the United States. Such transfers rely on the adequacy decision for the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission. We share your data with nobody else, unless the law requires it.

6. How long we keep it

• Messages that do not lead to a project: up to 12 months after the last contact; then they are deleted.
• If the project goes ahead: for the duration of the contract and then for the legal retention periods — invoicing records are kept for 10 years.
• Technical access data: for the periods Cloudflare sets for operation and security.

7. Your rights

You can ask to access your data, to have it corrected or erased, to restrict its processing and to receive it in a portable format, and you can object to processing based on legitimate interest. Just write to hello@euphoricquartz.com; we reply within one month.

If you believe your data has not been handled lawfully, you can lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

8. Changes

If this policy changes, the new version is published on this page, with the update date at the top.