Privacy Policy

Last updated: 16/09/2026

This policy explains how personal data is collected and used on marisarodrigues.com, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Portuguese law.

1. Who is responsible for your data

The data controller is Marisa Rodrigues, operating as Marisa Rodrigues, Event and Wedding Planner.

For any question about this policy or your data, contact us at mrodrigues@ersalespower.pt or (+351) 934 280 125.

2. What data we collect and why

Contact form. When you send an enquiry, we collect your first and last name, email address, phone number (optional), the services you are interested in, your desired event date and the project details you choose to share. We use this information only to reply to you, understand your event and prepare a proposal.

The legal basis is Article 6(1)(b) GDPR: processing necessary to take steps at your request before entering into a contract. If you become a client, we continue to process your data to deliver the agreed services and to meet our legal obligations, including accounting and tax requirements (Article 6(1)(b) and (c) GDPR).

Website usage. Our website platform collects technical information such as your browser, device, pages visited and approximate location. Essential cookies are used to operate the site securely. Analytics cookies are used only if you accept them in the cookie banner (Article 6(1)(a) GDPR).

Spam protection. The contact form uses Google reCAPTCHA to prevent automated and abusive submissions. This service processes technical data such as your IP address and browser information. The legal basis is our legitimate interest in keeping the form secure (Article 6(1)(f) GDPR).

We do not use your data for marketing, we do not sell it, and we do not make automated decisions about you.

3. Who we share your data with

We only share your data with service providers that help us run the website and our business, acting on our instructions:

  • Squarespace (Squarespace Ireland Limited and Squarespace, Inc.), which hosts the website and stores form submissions.

  • Google (reCAPTCHA), for spam protection on the contact form.

  • [EMAIL PROVIDER, e.g. Google Workspace or Microsoft 365], where enquiries are received by email.

Some of these providers may process data in the United States. Squarespace, Inc. participates in the EU-U.S. Data Privacy Framework and relies on the European Commission's Standard Contractual Clauses where required. Other providers use equivalent safeguards recognised under the GDPR.

We may also disclose data where required by law or by a competent authority.

4. How long we keep your data

  • Enquiries that do not become a booking: deleted within 12 months of our last contact.

  • Clients: kept for the duration of the service and afterwards for as long as required by law. Invoices and accounting records are kept for 10 years under Portuguese tax law.

  • Analytics data: kept in aggregated form by our website platform according to its own retention periods.

5. Cookies

Cookies are small files stored on your device when you visit a website.

Essential cookies are necessary for the site to work and to keep it secure, for example to protect forms against misuse. They do not require consent and cannot be switched off.

Analytics cookies (set by Squarespace) help us understand how many people visit the site and which pages they view. They are only set if you click "Accept" in the cookie banner.

You can change your choice at any time using the "Cookie preferences" button at the bottom of the page, or by deleting cookies in your browser settings.

6. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;

  • ask us to correct inaccurate or incomplete data;

  • ask us to delete your data;

  • object to or ask us to restrict certain processing;

  • receive your data in a portable format;

  • withdraw your consent to analytics cookies at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, email [EMAIL]. We will reply within one month.

If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

7. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date of the last update shown at the top.