Privacy Policy

Last updated: 26 June 2026

This Privacy Policy explains how Carnibighe ("we", "us", "our") collects, uses, and protects personal data when you visit carnibighe.bond or contact us. We comply with the EU General Data Protection Regulation (GDPR) and Portuguese Law No. 58/2019.

1. Data Controller

Carnibighe, Rua de Cedofeita 256, 4050-180 Porto, Portugal. Email: [email protected]. Phone: +351 22 384 71 52.

2. Personal Data We Collect

• Contact details: name, email, phone number (when you submit our contact form)
• Project information: budget range, message content
• Technical data: IP address, browser type, pages visited (via cookies — see Cookie Policy)
• Consent records: your cookie preference stored as carnibighe_bond_consent in localStorage

3. Legal Basis for Processing

• Consent — contact form submission, analytics cookies (when you click "Accept All")
• Legitimate interest — essential website functionality and security
• Contract — processing necessary to deliver design services you request

4. How We Use Your Data

We use personal data to respond to enquiries, provide quotations in EUR, deliver interior design services, improve our website, and comply with legal obligations. We do not sell your data to third parties.

5. Data Retention

Enquiry data is retained for 24 months unless a project proceeds, in which case data is kept for the duration of the contract plus 7 years for accounting purposes. Cookie consent records are stored locally on your device until cleared.

6. Your Rights Under GDPR

You have the right to access, rectify, erase, restrict processing, data portability, and to object to processing. You may withdraw consent at any time without affecting prior lawful processing. To exercise your rights, email [email protected]. You may lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD).

7. Data Processors

We may share data with hosting providers, email services, and analytics tools bound by GDPR-compliant data processing agreements. All processors are located within the EU/EEA or provide adequate safeguards.

8. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, or destruction.

9. Changes

We may update this policy. Material changes will be posted on this page with an updated date.