Privacy & Cookie Policy

This Privacy and Cookie Policy explains how we collect, use, store and protect the personal data processed through our website, forms, ads, WhatsApp, email, social media, customer-service tools and other channels related to tipo.design services.

This Policy has been drafted in accordance with the General Data Protection Regulation — Regulation (EU) 2016/679 (“GDPR”) —, applicable Portuguese law and the transparency obligations set out in the European Artificial Intelligence Regulation — Regulation (EU) 2024/1689 (“AI Act”).

The entity responsible for processing personal data is:

Leticia Suher Martins Digital & Creative Lda, owner of the tipo.design brand
Tax number (NIF): 515 837 750
Address: Rua Trabalhadores do Mar, 16, 3.º andar B, Setúbal, Portugal
General email: hello@tipo.design
Privacy-related email: hello@tipo.design

For the purposes of this Policy, this entity is referred to as “tipo.design”, “we” or “the controller”.

This Policy applies to people who:

• visit the tipo.design website;
• request information or quotes;
• interact with tipo.design ads;
• contact us via WhatsApp, email, phone or social media;
• use forms or customer-service tools;
• purchase or use tipo.design services;
• subscribe to commercial communications;
• represent clients, suppliers, partners or other entities with which we maintain professional relationships.

Depending on the form of interaction and the service requested, we may process the following categories of data:

3.1. Identification and contact data

• name;
• phone number;
• email address;
• postal address;
• country or general location;
• company name;
• professional role or position.

3.2. Data related to customer service and the commercial relationship

• service or plan of interest;
• needs communicated;
• information about the business or project;
• available budget;
• desired deadlines;
• answers provided during customer service;
• contact history;
• proposals, requests and contracts;
• communication preferences.

3.3. Billing and payment data

• name or company name;
• tax identification number;
• billing address;
• data required to issue invoices;
• information about payments and contractual status.

tipo.design does not store complete bank card data when payment is processed directly by payment service providers.

3.4. Website usage data

• IP address;
• device type;
• browser and operating system;
• pages visited;
• duration and browsing path;
• traffic source;
• interactions with forms, buttons and content;
• identifiers associated with cookies and similar technologies.

3.5. Communications data

We may retain messages and information shared through:

• WhatsApp;
• email;
• forms;
• social media;
• customer-service tools;
• meetings and calls, where applicable.

Calls or meetings will not be recorded without prior notice and, where necessary, without obtaining the relevant consent.

3.6. Data from ads and digital platforms

When someone interacts with a tipo.design ad, we may receive data provided by the user through the platform, such as name, phone, email, company, service of interest and answers given in a form.

We may also receive technical information about the campaign, ad or form that originated the contact.

3.7. Special categories of data

tipo.design does not intentionally request data relating to health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, biometric data or other special categories set out in the GDPR.

We ask that such information, as well as passwords, complete banking data or identification documents, are not shared via WhatsApp or the virtual assistant, except where strictly necessary and requested through an appropriate channel.

Personal data may be collected:

• directly from the data subject;
• through the website and its forms;
• during WhatsApp customer service;
• through ads and forms on platforms such as Meta, Google or LinkedIn;
• by email, phone or social media;
• during the contracting and delivery of services;
• through cookies and similar technologies;
• through clients, partners or representatives, where there is a legitimate basis for the contact;
• through public professional sources, where applicable and permitted by law.

Where data is not collected directly from the data subject, we will provide the information required by the GDPR within the applicable legal deadline.

We may process personal data to:

• respond to information requests;
• carry out initial customer service;
• identify needs and recommend services;
• prepare and send proposals or quotes;
• schedule meetings and demos;
• enter into and perform contracts;
• deliver the contracted services;
• manage payments and invoicing;
• provide customer support;
• organise and follow up on commercial opportunities;
• improve our services and processes;
• ensure the security of systems;
• prevent abusive or fraudulent use;
• analyse website and campaign performance;
• personalise content and advertising, subject to consent where required;
• send commercial communications, as legally permitted;
• comply with legal, tax, accounting and regulatory obligations;
• establish, exercise or defend rights in administrative or judicial proceedings.

tipo.design processes personal data based on one or more of the following grounds:

6.1. Pre-contractual steps

Where the data subject requests information, a quote, a demo, a meeting or other contact related to a possible engagement.

6.2. Performance of a contract

Where processing is necessary to deliver the contracted services, manage requests, communicate with the client, process payments or fulfil other contractual obligations.

6.3. Compliance with a legal obligation

Where it is necessary to retain or disclose data to comply with tax, accounting, legal or regulatory obligations.

6.4. Legitimate interest

Where processing is necessary to manage the relationship with clients and prospective clients, improve services, organise customer service, protect systems, prevent fraud or defend rights, provided those interests do not override the data subject's rights and freedoms.

6.5. Consent

Where the law requires authorisation, in particular for certain commercial communications, non-essential cookies, recordings or other specific purposes.

Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out beforehand.

tipo.design uses an artificial intelligence assistant called Jorge to provide first-line customer service via WhatsApp and, potentially, other digital channels.

Before the interaction begins, the person will be clearly informed that they are communicating with an artificial intelligence system.

Jorge can:

• present tipo.design services;
• ask initial questions;
• identify the service of interest;
• collect information needed for customer service;
• answer general questions;
• organise the data provided;
• route the contact to a member of the team.

During this interaction, name, phone number, company, role, service of interest, needs, deadlines, budget and the content of the messages shared may be processed.

Jorge acts as a support and initial qualification tool. The assistant does not enter into contracts, does not approve credit, does not process payments and does not make solely automated decisions producing legal effects or significant impacts on the user.

The user may request human assistance at any time by writing “human assistance” or making an equivalent request.

When service moves from artificial intelligence to a person, or from a person to artificial intelligence, that change will be clearly communicated.

Responses generated by artificial intelligence systems may have limitations or inaccuracies. Essential information about prices, deadlines, conditions and contracting must be confirmed by the team or by the official tipo.design documents.

Information shared during customer service may be processed by the automation tool provider and by the provider of the artificial intelligence technology required for Jorge to operate.

tipo.design will adopt appropriate settings and contractual conditions to limit processing to the purposes of customer service, security, maintenance and service delivery.

Conversation data will not be used by tipo.design, nor authorised, for training public or general-purpose artificial intelligence models.

tipo.design does not intend to make decisions based solely on automated processing that produce legal effects or significantly affect the data subject.

The assistant may classify the contact according to the service sought, the timing of the engagement or the need presented, solely to organise customer service and route the request.

Should tipo.design implement automated decisions with significant effects, this Policy will be updated and the applicable rights will be ensured, including information about the logic involved, the possibility of human intervention and contesting the decision.

Interacting with an ad, requesting a quote or starting a conversation does not, in itself, represent general authorisation for the continued sending of promotional campaigns.

tipo.design may send communications related to:

• the request made;
• a proposal requested;
• a contracted service;
• information necessary to the commercial relationship;
• promotional communications permitted by law.

Where consent is required, promotional communications will only be sent after it has been obtained.

The data subject may cancel commercial communications at any time through the mechanism provided in the message or by contacting us at hello@tipo.design.

Even after cancelling promotional communications, we may continue to send messages necessary for the performance of contracts or the handling of ongoing requests.

tipo.design does not sell personal data.

Data may be shared only where necessary with:

• website hosting and maintenance providers;
• WhatsApp and communication platforms;
• automation and artificial intelligence providers;
• commercial management and customer relationship systems;
• email and scheduling platforms;
• payment service providers;
• analytics, advertising and measurement tools;
• accountants, consultants, lawyers and other professional providers;
• public authorities, where required by law;
• partners involved in delivering the requested service.

Whenever they act as processors, these providers must handle data in accordance with documented instructions and obligations of confidentiality, security and data protection.

An up-to-date list of the main categories of providers, or of the relevant providers, may be requested via the privacy email.

WhatsApp is a service provided by Meta and has its own terms and privacy policies.

When the user communicates with tipo.design via WhatsApp, certain data may also be processed by Meta, including the phone number, technical data and information related to the use of the platform.

The same principle applies to other external platforms, such as social media, scheduling services, payment methods and ad forms. We recommend that users consult the privacy policies of those platforms.

tipo.design's responsibility covers the processing carried out under its control, without prejudice to each platform's own responsibilities.

Some technology providers may process or store data outside Portugal or the European Economic Area.

Where an international transfer takes place, tipo.design will seek to ensure an adequate legal mechanism is in place, such as:

• an adequacy decision by the European Commission;
• Standard Contractual Clauses;
• applicable binding corporate rules;
• complementary contractual, technical and organisational measures.

The data subject may request additional information about the mechanisms used via the privacy email.

Personal data will be kept only for the period necessary for the purposes that justified its collection or for the periods required by law.

As a reference:

• contacts without an engagement: 6 months after the last interaction;
• commercial opportunities under negotiation: up to 24 months after the last interaction;
• client conversations: during the contractual relationship and for the period necessary to manage the service;
• billing data and accounting documents: for the applicable legal period;
• data used for marketing: until consent is withdrawn, an objection is raised or the internal review period ends;
• technical and security logs: for the period necessary to prevent incidents and protect systems;
• cookies: for the periods indicated in the cookie management tool.

Data may be kept for additional periods where necessary to comply with legal obligations or to establish, exercise or defend rights.

tipo.design adopts technical and organisational measures appropriate to the risks of processing, including, where applicable:

• access control;
• authentication and credential management;
• role-based access limitation;
• backups;
• system updates;
• confidentiality agreements;
• supplier selection and assessment;
• incident response procedures;
• minimisation of the data collected;
• team training and guidance.

No system is absolutely secure. In the event of a personal data breach, tipo.design will adopt the measures required by the GDPR, including notifying the competent authority and the data subjects where applicable.

Under the GDPR, the data subject may exercise, where applicable, the following rights:

• access to their data;
• rectification of inaccurate or incomplete data;
• erasure of data;
• restriction of processing;
• objection to processing;
• data portability;
• withdrawal of consent;
• not to be subject to solely automated decisions with significant effects;
• lodging a complaint with a supervisory authority.

The exercise of some rights may be subject to legal or contractual limitations or to the protection of third-party rights.

To exercise your rights, contact us at hello@tipo.design.

We may request information necessary to confirm the identity of the requester. We will respond within the legally applicable deadlines.

The data subject may also lodge a complaint with:

Comissão Nacional de Proteção de Dados — CNPD
Avenida D. Carlos I, 134, 1.º
1200-651 Lisboa, Portugal
Email: geral@cnpd.pt
Website: www.cnpd.pt

The tipo.design website uses cookies and similar technologies to ensure it works, remember preferences, measure performance and, subject to consent where required, personalise content and advertising.

Cookies may be classified as:

17.1. Strictly necessary cookies

Essential for the operation, security and delivery of features requested by the user. They do not depend on consent when used exclusively for those purposes.

17.2. Preference cookies

Allow choices to be remembered, such as language, region or browsing settings.

17.3. Analytics cookies

Help us understand how the website is used and improve its performance.

17.4. Marketing cookies

Allow campaigns to be measured, audiences to be created and more relevant advertising to be shown on external platforms.

Non-essential cookies should only be activated after the user's choice, where consent is legally required.

The user may accept, refuse or configure cookies through the panel provided on the website and change their decision later.

The detailed list of cookies, their providers, purposes and durations must be available in the consent management panel and kept up to date in line with the technologies actually installed.

The tipo.design website and communications may contain links to external websites or services.

tipo.design does not control the privacy practices of those third parties. We recommend reviewing their policies before providing personal data.

tipo.design services are intended for companies, professionals and people with legal capacity to contract.

We do not intentionally collect data from minors for commercial purposes. If we find that data from a minor has been collected without an adequate basis, we will take steps to delete it.

Some data is necessary to respond to requests, prepare proposals, enter into contracts, issue invoices or deliver the services.

Where providing data is mandatory, the absence of that information may prevent customer service or contracting.

Optional questions will be identified or may be declined without preventing customer service, whenever they are not necessary for the requested purpose.

This Policy may be updated as a result of legal, technological or operational changes.

The most recent version will always be available on the tipo.design website, indicating the date of the last update.

Where a change is material and significantly affects how data is processed, tipo.design will take reasonable steps to inform the affected data subjects.

To clarify questions about this Policy, exercise rights or raise matters related to privacy and data protection, contact:

tipo.design
Privacy email: hello@tipo.design
General email: hello@tipo.design
Address: Rua Trabalhadores do Mar, 16, 3.º andar B, Setúbal, Portugal