Legal

Privacy Policy

Last updated: 9 June 2026

This Privacy Policy explains how Briefly ("Briefly", "we", "us", or "our") collects, uses, stores, and protects your personal data when you visit our website or submit a project brief. We are committed to handling your information transparently and in compliance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable Portuguese data-protection law.

This document is a thorough, GDPR-aligned starting point tailored to Briefly's setup. It is provided for convenience and is not a substitute for review by a qualified lawyer in your jurisdiction before publishing.

01Who we are

Briefly is a personal web-design service operated by David Cruz, a digital designer based in Portugal. For the purposes of the GDPR, the data controller responsible for your personal data is:

  • Controller: David Bernardo da Cruz
  • Registered address: Rua Aristides de Sousa Mendes N.º 16, 2670-545 Loures, Portugal
  • Tax number (NIF): 205254128
  • Contact email: hello@briefly.pt

If you have any questions about this policy or how your data is handled, you can reach us at the email above.

02Data we collect

We only collect the data we need to respond to your enquiry, deliver our service, and keep the website working. We do not sell your data, and we do not build advertising profiles about you.

Information you give us through the brief form

When you submit a project brief, we collect your name, email address, the type of project you select, your project description, and any add-ons you express interest in. Anything you choose to write in the free-text field is also stored as part of your brief.

Used to respond to and deliver your project

Information sent when you email us

If you contact us by email, we receive your email address, your message, and any information you choose to include.

Used to handle your request

Technical & usage data

Like most websites, our hosting and analytics tools may automatically receive limited technical information such as your IP address, browser type, device, and the pages you visit. This is used in aggregate to keep the site secure and understand how it is used.

Used for security and analytics

We do not intentionally collect special categories of data (such as health, political opinions, or biometric data). Please do not include sensitive information of this kind in your brief.

03How we use your data

We use the personal data we collect for the following purposes:

  • To respond to your brief or enquiry — reading your request, replying to you, and discussing your project.
  • To deliver the service — designing and building your website, arranging payment, and providing your finished files.
  • To provide support — handling revisions, questions, and any optional ongoing support you subscribe to.
  • To improve the website — understanding aggregate usage so we can make the site faster and clearer.
  • To meet legal obligations — keeping records required for accounting, tax, and other legal purposes.

05Cookies & similar technologies

Our website uses a small number of cookies and similar technologies. Essential cookies are needed for the site to function and to remember your cookie choice. Analytics cookies help us understand, in aggregate, how visitors use the site so we can improve it.

When you first visit, a banner lets you accept or reject non-essential cookies, and your choice is stored locally in your browser. You can change your decision at any time by clearing your browser storage and reloading the site. Most browsers also let you block or delete cookies through their settings.

06Sharing & third-party processors

We never sell your personal data. We share it only with trusted service providers ("processors") who help us run Briefly, and only to the extent necessary. The providers we currently rely on are:

  • Web3Forms — processes and delivers your brief submission to us. Receives the data you enter in the form.
  • Google Workspace (Gmail) — the email service through which we receive, store, and reply to your brief and correspondence.
  • GitHub Pages — hosts and serves this website to your browser.
  • Google Analytics — provides aggregate statistics about how visitors use the website. May set analytics cookies and process limited technical data such as your IP address.

Each provider is bound by its own privacy and data-processing terms and may only use your data on our instructions. Payment is arranged directly with you (for example by bank transfer) once you engage our service. We may also disclose data where required by law or to protect our legal rights.

07International data transfers

Briefly is based in Portugal and we aim to keep your data within the European Economic Area (EEA) where possible. However, some of our providers — in particular Google (Google Workspace and Google Analytics) — are based in the United States and may process data outside the EEA. Where this happens, the transfer is protected by appropriate safeguards required under the GDPR, such as the EU–U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

08How long we keep your data

We keep personal data only for as long as necessary for the purposes described in this policy:

  • Brief & enquiry data — retained while we handle your request and for a reasonable period afterwards in case you return; deleted on request where we have no legal reason to keep it.
  • Client & project records — retained for the duration of the project and for as long as required by accounting and tax law.
  • Analytics data — retained in aggregate or for the limited period set by our analytics tool.

09How we protect your data

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse — including encrypted connections (HTTPS) and access controls on the tools we use. No method of transmission or storage is ever completely secure, but we take your privacy seriously and continually review our practices.

10Your rights

Under the GDPR, you have the following rights over your personal data. To exercise any of them, contact us at hello@briefly.pt and we will respond within the timeframes required by law.

Access

Request a copy of the personal data we hold about you.

Rectification

Ask us to correct inaccurate or incomplete data.

Erasure

Ask us to delete your data where there is no overriding reason to keep it.

Restriction

Ask us to limit how we process your data in certain cases.

Portability

Receive your data in a portable, machine-readable format.

Objection

Object to processing based on our legitimate interests.

Withdraw consent

Withdraw consent for analytics or cookies at any time.

Complain

Lodge a complaint with a supervisory authority.

In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD) — you can find their contact details at cnpd.pt.

11Children's privacy

Briefly is a service aimed at businesses and professionals and is not directed at children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

12Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically.

13Contact us

If you have any questions, requests, or concerns about this Privacy Policy or your personal data, please get in touch:

Briefly — Data Protection

David Cruz · Portugal
Email: hello@briefly.pt