Privacy Policy

1. Who is responsible for your data

Svetlana Arnaudova, R. da Cruz de Pau 453, 4460-290 Senhora da Hora, Matosinhos, Portugal. Email: hello@globalcopywrite.com

I’m a one-person business. Any question about your data comes straight to me.

2. What I collect and why

When you just visit the site

• No cookies, no analytics, no tracking pixels. Fonts are served from this site’s own server, and there are no embedded videos, maps or social media widgets. Visiting a page doesn’t send your data to any third party.
• Server logs. Like every web server, my hosting provider’s server automatically records technical data for each request: IP address, date and time, the page requested, and browser and device information. These logs are kept for a limited time (normally no more than 14 days) to keep the site running and secure. Legal basis: legitimate interest in the security and operation of the site (Art. 6(1)(f) GDPR).

When you send the project form

• What you enter: name, email address, company, website, service you’re interested in, budget range, deadline, markets/languages, your message, and any files you choose to upload (up to 3).
• Why: to read your enquiry, reply to it, send you a quote and, if you go ahead, prepare and run the project.
• Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). Name, email and message are required, because I can’t reply without them. Everything else is optional.
• Confirmation email. The form sends an automatic email to the address you entered, confirming that your brief arrived.
• Spam and abuse protection. To stop the form being flooded, the server keeps a keyed hash of your IP address (a scrambled value, not the address itself) for no more than 1 hour and then deletes it. The form also contains a hidden field and a timing check that bots tend to trip. Legal basis: legitimate interest in keeping the form usable and secure (Art. 6(1)(f) GDPR).

Files you upload

Files are attached to the email I receive. They are not kept on the web server beyond the moment needed to process and send your submission.

Files often contain other people’s information, or confidential material: existing website copy, brand guidelines, customer quotes. Please only upload what you’re entitled to share with me. I treat everything you send as confidential and use it only for your enquiry or project. If you’d rather not upload something, tell me in the message and we’ll find another way.

If we work together

I keep our project correspondence, briefs and deliverables for as long as the project runs (legal basis: performance of a contract, Art. 6(1)(b) GDPR). I keep contracts and invoices for as long as Portuguese tax law requires (legal basis: legal obligation, Art. 6(1)(c) GDPR).

3. How long I keep it

4. Who else sees it

Only the providers I need to run the site and my email:

• my web hosting provider, with servers in the EU;
• my email provider, which delivers and stores the messages sent through the form.

Both act on my instructions and under data processing terms. If we work together, invoice data also goes to the Portuguese Tax Authority (Autoridade Tributária e Aduaneira) as the law requires, and to my accountant, if I use one.

I don’t sell your data, share it for advertising, or pass it to anyone else, unless a law or a court requires me to.

5. Transfers outside the EU

I don’t transfer your data outside the European Economic Area. If that ever changes (for example, a new provider), I’ll only do it with the safeguards the GDPR requires, and I’ll update this policy.

6. Your rights

You can ask me, at any time and free of charge, to:

• tell you what data I hold about you and give you a copy (access);
• correct it (rectification);
• delete it (erasure), unless I have to keep it by law, for example invoices;
• restrict how I use it (restriction);
• send it to you, or to someone else, in a common format (portability);
• stop using it where I rely on legitimate interest (objection).

Just email hello@globalcopywrite.com. I’ll reply within one month. I may ask you to confirm your identity first, so that I don’t send your data to the wrong person.

I don’t make automated decisions or build profiles about you.

7. Complaints

If you think I’ve mishandled your data, please tell me first and I’ll try to put it right. You also have the right to complain to the Portuguese data protection authority:

If you live in another EU country, you can also complain to the data protection authority there.

8. Security

The site runs over HTTPS. Form submissions are encrypted in transit to the server. No system is perfectly secure, but I keep the amount of data I hold as small as I can.

9. Changes

If I change how I handle data, I’ll update this page and the date at the top.