Legal

Privacy Policy

Studio Review is responsible for the personal data collected on this website.
To reach us, use the contact details shown on this website.

This website is built and hosted by Kadaleo, which handles your data on our behalf as our processor.

What we use your data for, and why
• To keep this website secure and working: our hosting providers record technical data such as your IP address and the pages requested. Legal basis: our legitimate interest in the security and operation of this website.
• To answer your enquiry: the details you type into the contact form, such as your name, phone, e-mail and message. Legal basis: steps taken at your request before a contract.
• To manage your booking: your name, e-mail and phone, and the service and time you choose. Legal basis: the booking contract and steps taken at your request before it.
• To send reminders and review requests by e-mail: if you booked and did not object on the booking form; every e-mail has a one-click unsubscribe. Legal basis: our legitimate interest in following up on your visit. You can object at any time.
• To send you updates: only if you subscribe with your e-mail in the footer of this website. Legal basis: your consent, which you can withdraw at any time.
• To send you occasional emails about our own products, services and offers, if you booked or bought from us and did not refuse this in the form. Legal basis: our legitimate interest in keeping in touch with our customers. Unsubscribe with one click in every email.
You do not have to give us your data, but without the details a form asks for we cannot answer you or take your booking.

Who receives your data
Kadaleo, its sub-processors, and the other services this website uses:
• Contabo (Germany): servers and database
• Cloudflare: delivery of this website, DNS and protection, and storage of photos
• Amazon Web Services (Amazon SES, EU region): sending and receiving e-mails
We do not sell your data. We share it with authorities only where the law requires it.

Transfers outside the EEA
Cloudflare, Amazon Web Services may process data outside the European Economic Area, including in the United States. These transfers rely on an adequacy decision, including the EU-US Data Privacy Framework for certified providers, or on the EU Standard Contractual Clauses.

How long we keep your data
We keep your data for as long as needed to deal with your enquiry or booking and for our relationship with you, and then for as long as the law requires, for example for accounting records. After that we delete it or make it anonymous.

Your rights
You can ask us for access to your data, to correct or delete it, to restrict or object to its use, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time, without affecting what was done before. To use your rights, contact us using the details above. You can also complain to the Portuguese data protection authority, the CNPD (www.cnpd.pt), or to the authority of your own country.

What this website stores on your device
This website stores on your device only what it needs to work.
• theme-preference (local storage): Your light or dark mode, if you use the toggle. Kept until you clear your browser data.
• kd_ct (session storage): Lets a booking link from a chat recognise you in this tab. Removed when you close the tab.

Reporting illegal content
To report illegal content on this website, write to legal@kadaleo.com (Kadaleo hosts this website).