Back
Legal document

Privacy Policy

How we handle your personal data — in accordance with the General Data Protection Regulation (GDPR).

Effective from 1 May 2026

At Homebrain, we treat your personal data with the same care we put into every project: discreetly, with purpose, and only what is strictly necessary. This document describes plainly what data we collect, why, for how long, and the rights you have as a data subject.

Who is the data controller

The controller responsible for the personal data collected through the Homebrain website is Homebrain, Lda, headquartered at Portugal, tax ID PT 519 282 272.

For any privacy-related matter, you can reach us directly at privacidade@homebrain.io.

What data we collect

We only collect data you voluntarily provide. Specifically:

Contact form

  • First name (so we can address you properly)
  • Email address (to reply to your message)
  • Message content (to understand your request)

Newsletter subscription

  • Email address (for occasional editorial communications)

We do not collect sensitive data (health, political opinions, religion, etc.). We do not buy or sell databases.

What we use your data for

  • Responding to contact requests, quotes, or project consultations.
  • Sending editorial communications (newsletter), only if you have explicitly subscribed.
  • Complying with applicable legal obligations (invoicing, tax, contractual).

We do not use your data to build behavioural profiles or to make automated decisions.

Who we share your data with

Your data is handled internally by the atelier team. To run the website and communicate with you, we may rely on specialised processors — namely web hosting and infrastructure providers, email delivery providers, and internal request-management tools. All processors are bound by contractual confidentiality and security obligations equivalent to our own.

We aim to keep your data hosted within the European Union. We do not transfer it outside the European Economic Area unless strictly necessary, and always under the safeguards required by the GDPR — namely standard contractual clauses approved by the European Commission.

How long we keep your data

We keep your data only for as long as necessary for the purposes for which it was collected:

  • Contact requests: for as long as needed to follow up on the commercial relationship — deleted once it is no longer reasonable to expect your interest in a project, or at the moment you request deletion.
  • Newsletter subscriptions: until you withdraw consent (you may do so at any time via the link in every email).
  • Data linked to contracted projects: for the legally applicable period, namely for tax and accounting purposes.

You may, at any time, request deletion of your data — see the “Your rights” section.

Your rights

As a data subject, you have the following rights against the controller:

  • Right to access your data.
  • Right to rectification of inaccurate data.
  • Right to erasure ("right to be forgotten").
  • Right to restriction of processing.
  • Right to data portability.
  • Right to object to processing.
  • Right to withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, simply email privacidade@homebrain.io. We commit to responding within 30 days.

You also have the right to lodge a complaint with the competent supervisory authority — in Portugal, the Comissão Nacional de Protecção de Dados (CNPD), at www.cnpd.pt.

Security

We apply technical and organisational measures appropriate to the nature of the data: encrypted communications (HTTPS/TLS), authenticated restricted access, access logs, and periodic procedure reviews.

No system is absolutely impenetrable. We commit to notifying you whenever a data breach may significantly affect your rights, within 72 hours.

Changes to this policy

We may update this document whenever the evolution of our activity or legal changes justify it. The effective date is always indicated at the top. We recommend periodic review.

Any privacy questions?

You can write to us directly at privacidade@homebrain.io or use the contact form. We commit to responding clearly and on time.

Talk to us