Last updated: 11 September 2025

This Privacy Policy explains how Earth & Clay Lda (“we”, “us”, “our”) handles your personal data when you visit earthandclayalgarve.com, contact us, or use our landscaping and gardening services.

0) Legal framework (GDPR)

We process personal data in accordance with the EU General Data Protection Regulation — Regulation (EU) 2016/679 (“GDPR”) — and Portugal’s implementing law, Law No. 58/2019 of 8 August, as amended. Our national supervisory authority is the CNPD — Comissão Nacional de Proteção de Dados. EUR-Lex+2Diário da República+2

1) Who we are (Controller)

• Company: Earth & Clay Lda

• Tax ID (NIF): 516052861

• Address: Rua das Amendoeiras, Casa Bela 49, Varjota, 8100-335 Loulé, Portugal

• Email: hello@earthandclayalgarve.com

2) Data we collect

• Identity & contact: name, email, phone, address.

• Service data: project/site address, garden preferences, notes from visits.

• Billing & payments: tax ID, invoice details (payments handled by providers).

• Communications: messages via forms, email, or phone.

• Website usage & cookies: IP address, pages viewed, consent choices (see Cookies Policy).

If we wish to use photos/videos of our work for portfolio or social media, we will request your consent first.

3) Purposes and legal bases

• Quotes, bookings, and service delivery — contract or pre-contractual steps.

• Invoicing and legal obligations — compliance with tax/accounting laws.

• Marketing emails (optional) — only with your consent (you may withdraw at any time).

• Website analytics & improvement — with your consent for non-essential cookies (strictly necessary cookies rely on legitimate interests).

• Security and fraud prevention — legitimate interests.

4) Sharing your data

We share only what is necessary with:

• Processors acting on our behalf (hosting/CDN, email, productivity tools, accounting, payment processors, analytics—when consented).

• Public authorities where required by law.
  All processors are bound by GDPR-compliant contracts.

5) International transfers

If a provider is located outside the EEA/UK, we rely on an adequacy decision or Standard Contractual Clauses (or equivalent safeguards) under the GDPR.

6) Retention

We keep data only as long as needed:

• Enquiries/communications: up to 2 years after last meaningful contact.

• Clients/billing records: for the legally required period (e.g., accounting/tax).

• Marketing: until you withdraw consent or after 2 years of inactivity.
  After these periods we delete or anonymise data securely.

7) Your rights (GDPR)

You can access, rectify, erase, restrict processing, object, and request data portability. Where processing relies on consent, you may withdraw it at any time.
To exercise your rights, contact hello@earthandclayalgarve.com. We respond within 1 month under the GDPR. You may also lodge a complaint with the CNPD — Comissão Nacional de Proteção de Dados (Portugal). EUR-Lex+1

8) Security

We apply appropriate technical and organisational measures (encryption in transit, access controls, backups). No system is perfectly secure; we continually improve our practices.

9) Cookies

We use strictly necessary cookies and, with your consent, analytics/marketing cookies. Manage your choices via our banner or the Cookie Settings link. See our Cookies Policy for details.

10) Changes to this Policy

We may update this Policy to reflect legal or operational changes. The date at the top shows the current version.

11) Contact

Questions about privacy or your rights: hello@earthandclayalgarve.com
Address: Rua das Amendoeiras, Casa Bela 49, Varjota, 8100-335 Loulé, Portugal.

12) Supervisory Authority

Comissão Nacional de Proteção de Dados (CNPD) — Portugal
Postal address: Av. D. Carlos I, 134, 1º, 1200-651 Lisboa, Portugal
Phone: +351 213 928 400
Fax: +351 213 976 832
Email: geral@cnpd.pt
Website: www.cnpd.pt