Last updated: 30 July 2026
1. Who is responsible for your personal data?
This website and the PortoPhoto business are operated by João Pedreda, acting as a sole trader under the trading name PortoPhoto.
For the purposes of applicable data-protection law, João Pedreda is the controller of the personal data described in this Privacy Policy.
Contact
Email: hello@portophoto.com
2. Scope of this Privacy Policy
This Privacy Policy explains how PortoPhoto collects, uses, stores, and protects personal data when you:
Visit this website
Contact PortoPhoto by email or through a website form
Submit a project enquiry
Request information about photography, video, or production services
Become a client, supplier, collaborator, or project participant
Interact with content embedded on the website
Separate agreements or project documentation may provide additional information about how personal data is handled in connection with a particular assignment.
3. Personal data PortoPhoto may collect
Depending on how you interact with PortoPhoto, the following personal data may be collected:
Your name
Your email address
Your telephone number
Your organisation, company, or professional role
Information about a proposed or confirmed project
Project locations, dates, requirements, and intended uses
Information contained in messages, briefs, schedules, plans, or files you provide
Records of correspondence and agreed project details
Billing, tax, and payment information
IP address, browser type, device information, referral source, and website activity
Cookie and analytics information
Photographs, video, audio, names, roles, and other information relating to people involved in an assignment
Please avoid submitting sensitive personal data unless it is genuinely necessary for the relevant enquiry or project.
4. How personal data is collected
PortoPhoto may collect personal data:
Directly from you when you complete a form, send an email, make an enquiry, or provide project information
From a client, organisation, agency, producer, or other project contact
During photography, video, audio, or production activity
Automatically through website hosting, security, analytics, cookies, server logs, and embedded services
From publicly available professional or business sources where relevant to a legitimate business enquiry
5. How personal data is used
PortoPhoto may use personal data to:
Respond to enquiries and requests
Assess potential assignments
Prepare proposals, estimates, schedules, and project plans
Enter into and perform contracts
Communicate with clients, suppliers, collaborators, and project participants
Plan, produce, edit, deliver, license, archive, and manage photography and video
Coordinate access, locations, schedules, permissions, and production requirements
Issue invoices, receive payments, and maintain accounting records
Manage website security and prevent misuse
Investigate technical problems, spam, fraud, or unlawful activity
Comply with tax, accounting, legal, and regulatory obligations
Establish, exercise, or defend legal claims
Analyse and improve the website and its content
Send marketing communications where permitted by law
PortoPhoto does not sell personal data to advertisers or unrelated third parties.
6. Legal bases for processing
PortoPhoto processes personal data under one or more of the following legal bases.
Steps requested before entering into a contract
This applies when you request information, ask about availability, submit a project enquiry, request an estimate, or discuss a potential assignment.
Performance of a contract
This applies where processing is necessary to plan, produce, deliver, administer, license, or invoice an agreed assignment.
Legal obligations
This includes tax, accounting, recordkeeping, regulatory, and other obligations imposed by applicable law.
Legitimate interests
PortoPhoto may process personal data where reasonably necessary to:
Respond to business communications
Operate and secure the website
Maintain appropriate business and project records
Prevent fraud, spam, or misuse
Manage professional and commercial relationships
Protect PortoPhoto’s property, rights, and legal interests
Establish, exercise, or defend legal claims
These interests are considered in relation to your rights and reasonable expectations.
Consent
Consent may be used where required, including for optional marketing communications, non-essential cookies, analytics, or embedded third-party content.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.
7. Contact forms and enquiries
When you submit a form or contact PortoPhoto directly, the information you provide is used to read, assess, and respond to your message.
Providing optional information may help PortoPhoto understand the subject of the enquiry and provide a more useful response.
Submitting a contact form, project enquiry, email, or brief does not create a contract, reserve availability, or guarantee acceptance of an assignment.
Website forms are created using Elementor and may be protected by Google reCAPTCHA.
8. Photography, video, audio, and project participants
Assignments may involve collecting or creating photographs, video recordings, audio recordings, names, job titles, and other information relating to identifiable people.
The appropriate legal basis and responsibilities may depend on:
The type of assignment
The commissioning client
The subject and location
The people involved
The intended use of the material
Applicable contractual or legal requirements
Where a client arranges access to employees, attendees, contractors, guests, or other participants, the client may also be responsible for providing appropriate information, obtaining necessary approvals, and ensuring that its instructions are lawful.
Further information may be included in project agreements, notices, schedules, releases, or other project documentation where necessary.
9. Cookies and similar technologies
The website uses cookies and similar technologies for website operation, security, spam prevention, analytics, embedded video, and mapping functionality.
Necessary technologies may operate where required for the security and basic functioning of the website.
Optional analytics, embedded media, and similar technologies may require your consent before they are activated. Where applicable, choices can be managed through the website’s cookie controls.
The website currently uses or may use the following services:
Google Analytics
Google Analytics is used to understand general website usage. It may collect information including:
Pages viewed
Approximate location
Referral source
Device and browser information
Interaction and usage data
Google reCAPTCHA
Google reCAPTCHA is used to protect website forms against spam, abuse, and automated submissions.
It may process technical and behavioural information to determine whether a form submission is being made by a legitimate visitor.
YouTube
YouTube may be used to display embedded video.
When YouTube content is loaded or played, Google may receive technical and interaction information, including your IP address, browser information, device information, and activity involving the embedded video.
Google Maps
Google Maps may be used to display mapping or location information.
When a map is loaded, Google may receive technical and interaction information relating to your device and use of the map.
Cloudflare
Cloudflare is used for services including domain management, website security, performance, and email routing.
Cloudflare may process technical information required to provide these services and protect the website.
Bluehost
Bluehost provides website hosting and related infrastructure.
Hosting services may process server logs, IP addresses, technical information, submitted form data, and other information required to operate the website.
Elementor
Elementor provides website-building and form functionality.
Information submitted through an Elementor form may be processed through the website and its connected hosting, email, security, and storage services.
You may manage optional cookie preferences through the website’s cookie controls and through your browser settings. Blocking some technologies may affect website functionality or prevent embedded content from loading.
10. Service providers and recipients
PortoPhoto may share personal data with service providers where reasonably necessary to operate the website, communicate with visitors, respond to enquiries, and conduct assignments.
These providers may include:
Bluehost, for website hosting and related infrastructure
Cloudflare, for domain management, security, performance, and email routing
Google, for email, analytics, spam prevention, embedded video, and mapping
Elementor, for website and form functionality
Cloud-storage and file-delivery providers
Accountants, banks, payment providers, and professional advisers
Assistants, editors, retouchers, videographers, producers, and other project collaborators
Legal, regulatory, tax, or public authorities where disclosure is required
Recipients should receive only the information reasonably necessary for their role.
11. International data transfers
Some technology, hosting, analytics, email, security, and embedded-content providers may process personal data outside Portugal or the European Economic Area.
Where personal data is transferred outside the European Economic Area, PortoPhoto will rely on a lawful transfer mechanism where required, such as:
An adequacy decision
Approved contractual safeguards
Another transfer mechanism permitted by applicable data-protection law
The exact processing location and safeguards may depend on the provider, account configuration, service, and processing activity involved.
12. Data retention
Personal data is retained only for as long as reasonably necessary for the relevant purpose and to comply with legal, tax, accounting, contractual, and dispute-resolution requirements.
PortoPhoto normally applies the following retention periods:
General contact enquiries that do not become assignments: six months after the last meaningful communication
Project enquiries and proposals that do not proceed: six months after the last meaningful communication or decision
Active client and project information: for the duration of the assignment and for as long afterwards as reasonably necessary to manage delivery, licensing, questions, disputes, and legal rights
Invoices, accounting records, tax records, and supporting documentation: ten calendar years, or any longer period required by applicable law
Marketing preferences and consent records: until consent is withdrawn or for as long as reasonably necessary to demonstrate compliance
Website, security, and server logs: for the period configured by the relevant provider and only for as long as reasonably required for operation, security, troubleshooting, or investigation
Information may be retained for longer where necessary to:
Comply with a legal obligation
Establish, exercise, or defend a legal claim
Investigate fraud, misuse, or a security incident
Resolve an active dispute
13. Data security
PortoPhoto uses reasonable organisational and technical measures intended to protect personal data against:
Unauthorised access
Accidental loss
Misuse
Alteration
Destruction
Unlawful disclosure
No website, email service, storage platform, or internet transmission can be guaranteed to be completely secure.
You should avoid sending highly confidential or sensitive information through ordinary contact forms or unencrypted email unless it is genuinely necessary.
14. Your data-protection rights
Subject to the conditions and limitations established by applicable law, you may have the right to:
Request access to your personal data
Request correction of inaccurate or incomplete personal data
Request deletion of personal data
Request restriction of processing
Object to certain processing
Request data portability
Withdraw consent where processing is based on consent
Obtain information about applicable international-transfer safeguards
Submit a complaint to a supervisory authority
Requests relating to your personal data can be sent to:
PortoPhoto may request information necessary to confirm your identity before responding to a request.
You may also submit a complaint to the Portuguese data-protection authority:
Comissão Nacional de Proteção de Dados
15. Marketing communications
PortoPhoto will only send electronic marketing communications where permitted by law.
You may unsubscribe or withdraw consent at any time by using the option included in the relevant communication or by contacting:
Messages concerning an enquiry, active assignment, invoice, licence, delivery, or contractual relationship are service communications rather than marketing communications.
16. External websites
The website may contain links to websites or services operated by third parties.
PortoPhoto is not responsible for the privacy practices, security, availability, or content of those external services.
You should review the privacy information provided by the relevant third parties.
17. Changes to this Privacy Policy
This Privacy Policy may be updated to reflect changes in:
The website
Business operations
Service providers
Data-processing activities
Legal or regulatory requirements
The current version and its latest revision date will be published on this page.
18. Contact
Questions about this Privacy Policy or the handling of personal data can be sent to:
João Pedreda, operating as PortoPhoto
Email: hello@portophoto.com