your data, simply.

Who we are

Volet is a brand consultancy based in Lisbon, Portugal. Volet is a trading name: the controller responsible for the data described here is Theresa Bodenhofer, NIF 292000120, Lisbon, Portugal. You can reach us about anything on this page at coucou(at)voletvolet.com

What data we collect

The contact page has a form. When you use it we collect your first and last name, your email address, the areas you say you are interested in, and your message. We hold no account or customer records on this site. If you write to us by email instead, we use your address solely to respond. If you accept cookies, our analytics and advertising providers also receive technical data about your visit, including your IP address, browser, and the pages you view, and we send Meta a hashed copy of a contact form submission. Both are described under Cookies below.

Why we are allowed to use it

We rely on two legal bases. Your contact form message and the email address you send it from are handled to take steps at your request before any agreement, and to reply to you: that is Article 6(1)(b) of the GDPR, and a legitimate interest in answering people who write to us under Article 6(1)(f). Everything involving analytics and advertising, including the Meta pixel and the hashed copy we send Meta, rests on your consent under Article 6(1)(a), which is why none of it happens unless you accept the banner, and why you can take that consent back at any time.

Cookies

If you click "Accept" on the cookie banner, this site loads two things. Google Analytics (GA4), to understand how visitors use the site: pages visited, time spent, and country of origin. And the Meta (Facebook and Instagram) pixel, which measures whether our advertising works, records when you book a call, and allows Meta to show our ads to people who have visited this site. Meta may combine this with data it already holds about you. If you accept and then send us the contact form, we additionally send Meta a copy of that event directly from our own server, including your email address and your name in an irreversibly hashed form, so that Meta can tell one of its adverts led to a real enquiry. Both copies carry the same identifier so the enquiry is counted once rather than twice. If you decline, none of this happens: no pixel loads, and nothing is sent from our server either. We sell your data to nobody. Our hosting provider (Vercel) may set strictly necessary cookies for security and performance, which are exempt from consent. The contact page embeds Calendly, which may set its own cookies if you interact with the booking widget.

Your cookie choices

When you first visit the site, a banner asks for your consent to analytics and advertising cookies. You can decline and the site works identically. To change your mind later, in either direction, use the "Cookie preferences" link in the footer of any page: it clears your stored answer and brings the banner back. If we add a new purpose, we ask again rather than relying on your earlier answer, which is why you may see the banner a second time: in September 2026 we began sending Meta a hashed copy of contact form submissions, and an earlier answer was given before that existed.

How long we keep it

Contact form messages and the emails they generate are kept for 24 months after we last spoke, and then deleted. Agency conversations are slow and someone who wrote to us last year may still be worth answering, but past that point there is no reason to hold your message. If we go on to work together, the records of that work are kept for as long as Portuguese commercial and tax law requires, which is ten years for invoicing records. Analytics data expires on Google Analytics’ own 14-month schedule. The advertising audiences we build in Meta expire on their own windows: 180 days for people who visited this site, 365 days for people who engaged with our posts or adverts.

Third-party services and transfers

This site is hosted on Vercel. Messages sent through the contact form are delivered by Resend, on servers in Ireland. Analytics are provided by Google Analytics 4. Advertising measurement is provided by Meta Platforms Ireland Limited, both through the pixel in your browser and through a direct connection from our server. The contact page uses Calendly for booking, and any campaign tags in the page address are passed to Calendly so we can tell which advert led to a booking. Google, Meta and Calendly are American companies, so data may be transferred outside the European Economic Area; those transfers rely on the EU-US Data Privacy Framework or on the European Commission’s standard contractual clauses, depending on the provider. Each provider’s own privacy policy applies to their respective data handling.

Your rights

Under GDPR you have the right to ask what personal data we hold about you, to have it corrected, to have it deleted, to receive it in a portable form, to restrict how we use it, and to object to our using it. Where we rely on your consent, you can withdraw it at any time, and doing so does not affect anything done before you withdrew it. Write to coucou(at)voletvolet.com and we will answer within one month. If you think we have handled your data badly, you also have the right to complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at cnpd.pt

Contact

Questions about this policy? Email us at coucou(at)voletvolet.com. This policy was last updated on 2 September 2026.