Privacy policy

What we collect

This site has a single point of personal data collection: the contact form. When you complete it we receive:

• Name
• Work email
• Phone, if you provide it (optional field)
• Company
• Service of interest and, if you provide it, the budget range
• The message you write
• A record that you gave consent, with the date

We run no advertising, we do not profile visitors, and we neither sell nor share data with third parties for commercial purposes.

What we use it for

Only to answer your enquiry and, if a conversation follows, to assess and prepare a possible engagement. Nothing else. You are not added to a newsletter or a marketing list.

On what legal basis

Processing rests on your consent, given when you submit the form (Article 6(1)(a) GDPR), and on the pre-contractual steps you request by contacting us (Article 6(1)(b)). You may withdraw consent at any time, without affecting the lawfulness of processing carried out before that point.

Who has access

Only the Angry Panda Productions team. Two processors are involved in running the site and the form:

• Vercel Inc.: site hosting and content delivery.
• Resend (Plus Five Five, Inc.): delivery of the email the form generates.
• Cloudflare, Inc.: the form's anti-bot check (Turnstile), which sets no cookies and does not track people across sites.

Both are United States based. Transfers outside the European Economic Area rely on the Standard Contractual Clauses approved by the European Commission and, where applicable, the EU-U.S. Data Privacy Framework.

How long we keep it

Contact messages are kept for 24 months from our last communication with you, then deleted. If a contractual relationship began in the meantime, the statutory retention periods for commercial and tax records apply instead.

Cookies

This site uses no advertising or behavioural analytics cookies, which is why there is no consent banner. One strictly necessary cookie is set:

• NEXT_LOCALE: remembers the language you chose so the site opens in it next time. One year. It holds nothing that identifies you.

Your rights

At any time you may request access to your data, its rectification or erasure, restriction of processing, portability, or object to the processing. Write to us and we will respond within one month at the latest.

If you believe your data is not being handled properly, you have the right to lodge a complaint with the Portuguese data protection authority (CNPD) at www.cnpd.pt, or with the supervisory authority in your own country.

Security

The site is served over encrypted connections only (HTTPS) and applies a restrictive content security policy. Form messages travel over encrypted channels and are readable only in our mailbox.

Changes to this policy

If we change how we handle personal data, we update this page and the last-updated date at the top.