Privacy Policy

1. Data Controller

João Lucas Soares Paredes

TV 1º de Maio 3

4815-111 Lordelo

Portugal

Email: lucas@lsdesign.dev

2. Contact Form

When you fill out our contact form, we process the data you provide (name, email address, message) to respond to your inquiry. Processing is based on Art. 6(1)(b) GDPR (pre-contractual measures).

The message is technically delivered via the email service Resend (resend.com), which sends it to our inbox. Resend acts as a data processor. Data is not stored in a database — it is only received as an email and retained for as long as necessary to handle your request and for organizational purposes.

Contact data submitted through the form is stored only for as long as necessary to handle the inquiry, and for a maximum of 12 months after the last contact. If invoicing data arises, it is retained for 10 years (legal requirement under Art. 52 CIVA, Portugal).

3. AI chat assistant

On this website you can use an AI assistant that answers questions about LS Design's services. When you send a message, its text is transmitted to our hosting provider Vercel Inc. (USA), which forwards it through its AI Gateway to the language model provider OpenAI (USA) to generate the answer. Your IP address is technically processed in the process (for example for security and to limit abuse, via a short-lived counter that is not stored permanently).

Please do not enter sensitive data (for example health data, financial or identity numbers, passwords) in the chat.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in answering visitors' questions efficiently and in operating the website securely). If your question relates to a specific project enquiry, processing is also based on Art. 6(1)(b) GDPR (pre-contractual measures).

Storage: We do not store chat conversations in a database and do not keep a chat history. The conversation exists only in your browser until you close or reload the page or switch the language. The service providers named above may process data for a limited time for technical operation and abuse prevention according to their own terms.

No automated decisions: The assistant does not make decisions that have legal or similarly significant effects on you (Art. 22 GDPR). It gives general information only; binding quotes are given by us personally after your enquiry via the contact form.

Transfer to third countries: Vercel and OpenAI are located in the USA. The transfer is based on the EU-U.S. Data Privacy Framework where the recipient is certified, otherwise on the EU Standard Contractual Clauses (Art. 44 et seq. GDPR).

Providing messages is voluntary. Without using the chat you can reach us at any time via the contact form or by email.

4. Vercel Web Analytics

We use Vercel Web Analytics to collect anonymized, aggregated usage statistics (e.g., number of visitors, pages viewed). This service does not use cookies or persistent identifiers that would allow individual visitors to be recognized. No consent is required, as no personal data enabling recognition is stored.

5. WhatsApp

You can optionally contact us via WhatsApp. The WhatsApp button on this website is only a link: the website itself collects and stores no data when it is displayed or clicked. If you click it, WhatsApp opens in your browser or in the app. WhatsApp is operated by WhatsApp Ireland Ltd., a company of Meta. From that moment your message, your phone number and your profile name are processed by WhatsApp under its own privacy policy, and we receive them in order to answer you (Art. 6(1)(b) GDPR). Using WhatsApp is voluntary; you can always use the contact form or email instead.

6. Cookies

This website uses one functional cookie, and only if you choose a language with the language switcher. Name: lsd_lang. It stores your language choice (en, de or pt) so that the website opens in that language the next time you visit. It is kept for one year, is not used for tracking, advertising or profiling, and is not passed on to any third party. If you never use the language switcher, no cookie is set. You can delete it at any time in your browser settings. We use no other cookies (no tracking, advertising or personalization cookies).

7. International Data Transfer

Resend (contact form email delivery) and Vercel (hosting) are both certified under the EU-U.S. Data Privacy Framework (DPF), ensuring an adequate level of protection under Art. 44 et seq. GDPR.

8. Your Rights

You have the right to access, rectify, erase, and restrict the processing of your data, as well as the right to data portability and the right to object. To exercise these rights, contact: lucas@lsdesign.dev

You also have the right to lodge a complaint with the competent supervisory authority (in Portugal: Comissão Nacional de Proteção de Dados, www.cnpd.pt).

9. Changes

This Privacy Policy may be updated as needed to reflect legal changes or changes to our services.