Privacy Policy

1. Who handles your data

Beyond Focus, Lda., with its registered office in Lisbon, Portugal, is the controller of the personal data collected on this website (beyondfocus.pt), in the emails we exchange with you and in the client portal (portal.beyondfocus.pt).

For any question about your data, write to geral@beyondfocus.pt or call +351 937 350 178.

2. What we collect

• Through our forms: your name, email, phone number, company, type of project, the services you are looking for, available budget, when you want to start and your message; on some forms, also your sector, company website and whether you have a project coming up; on the wedding request, the couple's names and the date and venue of the wedding. If someone recommended us to you, we keep their referral code. If you ask to receive news by email, we keep that choice.
• With each request: where your visit came from, when we know it (the campaign or ad you came from, taken from the address parameters, such as the Google Ads click identifier). If you accepted measurement cookies, some forms also send the last pages of the site you opened.
• When you book a call through Calendly: your name, email, the time booked and the answers you give when booking. If the call takes place on Microsoft Teams with a transcript, we keep the transcript and a summary of it, with the next steps and our estimate of whether the project will go ahead.
• When you review our work (beyondfocus.pt/avaliar): your name, company, email, your answers and, if you recommend someone, the contact details you give us.
• In the client portal: the email you sign in with (through a link sent to that email or, if you create one, with a password), your name and company, messages, comments and approvals on deliveries, which deliveries you open and when, project files, proposals, the documents you sign (the signature, the date and the IP address) and billing details. If you turn on browser notifications, we keep the notification address your browser gives us. On the review links we share, we keep the name and email you give when you comment or approve without an account. We also log sessions (IP address and browser) for security.
• When you visit the site: the server logs technical requests (IP address, browser and page requested), so the site works and stays secure. Browsing data from measurement and marketing tools is only collected if you accept them (section 6).

3. Why, and on what legal basis

Each use relies on one of the legal bases in Article 6(1) of the General Data Protection Regulation (GDPR):

• Answering your request and preparing a proposal: steps taken at your request before entering into a contract (point b).
• Delivering the project, running the client portal and invoicing: performance of the contract (point b) and our legal, tax and accounting obligations (point c).
• Sending news by email: your consent (point a). You can withdraw it at any time by writing to geral@beyondfocus.pt.
• Measuring visits and ad results with cookies: your consent (point a), given in the cookie notice.
• Using your review as a testimonial: your consent (point a), given in the dedicated box on the review form. You can withdraw it at any time by writing to geral@beyondfocus.pt, and we will stop using the review as a testimonial.
• Organising how we answer requests (for example, prioritising a request by budget and sector), preparing meetings and protecting the site and the portal from abuse: our legitimate interest in answering well and quickly and in keeping our systems secure (point f). This ranking organises our work and, for a free audit request, picks the suggestions for your sector that we send you. It makes no decisions that have legal effects on you or affect you in a similarly significant way.

4. Who we share it with

We do not sell personal data. We share it only with the providers who work for us, and each one receives only what it needs for its service:

• Vercel: hosts the website and the portal. With your permission, it also counts visits (Vercel Analytics, no cookies).
• Supabase: the database that stores requests, contacts and portal data.
• Resend: sends the automatic emails from the site and the portal (confirmations, notices and portal sign-in links).
• Microsoft (Microsoft 365): our email, calendar and Teams. Some requests create a draft reply in our Outlook.
• Anthropic: artificial intelligence we use to draft some emails and internal summaries, from your name, email, company, website and what you told us in your request, or from a meeting transcript.
• OpenAI: artificial intelligence behind the team's internal assistant in the portal (reply suggestions, summaries and task organisation). It receives the text the team asks it to help with, and nothing it produces is sent automatically.
• Cloudflare and Dropbox: store the videos, photos and files delivered in the portal.
• Calendly: schedules the calls you book with us.
• Google, Meta, Microsoft (Clarity) and LinkedIn: only if you accept measurement or marketing cookies (section 6).

The requests you send us, and your sign ups for news by email, also go into our internal client management system, which is the portal itself. We may also have to share data with the authorities when the law requires it.

5. Data outside the European Economic Area

Some of these providers are companies based outside the European Economic Area or may process data outside it: Vercel, Supabase, Resend, Microsoft, Anthropic, OpenAI, Cloudflare, Dropbox, Calendly, Google, Meta and LinkedIn.

In those cases, we seek to have the transfer covered by an appropriate safeguard, such as the Data Privacy Framework between the European Union and the United States, where the provider is certified, or the contractual clauses approved by the European Commission for these transfers. If you want to know which safeguard applies to a specific provider, write to geral@beyondfocus.pt.

6. Cookies

Measurement tools (Google Analytics, Microsoft Clarity, Vercel Analytics) and marketing tools (Meta, Google Ads, LinkedIn) only run if you accept them in the notice shown on your first visit. You can change your choice at any time under Cookie preferences, in the site footer and in the cookie policy. The list of cookies, with how long each one lasts, is in the cookie policy.

Read the cookie policy

7. How long we keep it

We keep data according to these criteria:

• Requests and contacts (forms, booked calls and reviews): for as long as there is a relationship or a negotiation with you and, when a negotiation ends without an agreement, until you ask us to delete them.
• Clients: project and portal data for as long as the relationship lasts and, after that, until you ask us to delete them; invoicing and accounting data for as long as tax law requires.
• News by email: we send it until you unsubscribe. Unsubscribing does not delete your email address: for that, ask us.
• Reviews you allowed us to use as testimonials: we stop using them when you withdraw your permission, and we delete them when you ask us to.
• Technical logs (emails sent, sessions and access to the site and the portal): for as long as needed to keep the systems working and secure.
• Your cookie choice: 6 months. How long each cookie lasts is in the cookie policy.

8. Your rights

You can ask us at any time for access to your data, correction, erasure, restriction of processing and portability. You can also object to processing based on our legitimate interest and, always, to marketing messages. Where processing relies on your consent, you can withdraw it whenever you want, without affecting what was done before.

To exercise any of these rights, write to geral@beyondfocus.pt. We reply within one month at the latest.

If you believe your data has not been handled properly, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), or to the authority of the country where you live.

CNPD website

9. Changes

When we change this policy, we update the date at the top of the page.