This is a studio site. It does not run analytics, set tracking cookies, or sell data. We collect the minimum we need, we tell you why, and you keep your rights over it. Here is what happens.
Who we are
The data controller is Clandestine Hours, based in Alhandra, Vila Franca de Xira, Portugal (NIPC PT519306732). For anything in this policy, write to hello@clandestinehours.com.
Getting in touch
The site does not have a contact form. There are two ways to reach us, and neither stores your message on our servers.
The brief. You can type a brief into the box on the homepage. That text stays in your browser until you act on it: you can open it in an AI tool of your choice, copy it, or email it to us. We do not receive or store the brief unless you choose to email it.
Email. When you email hello@clandestinehours.com (including by sending your brief that way), we receive your email address and whatever you write, and we keep it to read and reply. Legal basis: our legitimate interest in responding to enquiries.
Opening your brief in an AI tool
If you choose to open your brief in a third-party tool, for example Lovable, Bolt, v0, ChatGPT, Claude, Grok, Gemini, or Figma, your browser sends the text to that tool, and it is then processed by that company under its own terms and privacy policy, not ours. This only happens if you click one of those buttons. If you would rather not involve a third party, copy the brief or email it to us directly.
Proposal acceptance
If you accept a proposal we have sent you, we record that acceptance with your IP address and a timestamp, as proof that the agreement was made. Legal basis: taking steps to enter into, and performing, a contract.
Client dashboards
If you are an active client, your dashboard holds project information (project name, milestones, activity, messages) behind a private access link. It is visible only to whoever holds that link. Legal basis: performance of our contract with you.
How long we keep it
Emails you send us: kept for around 12 months, then deleted, unless they form part of an active engagement. Proposal acceptances and client-project records: kept for the duration of the engagement and for as long as we may need them to meet legal, accounting, and tax obligations. We do not keep personal data longer than we need it.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, hand it over in a portable form, or stop using it; and where we rely on consent, you can withdraw that consent at any time. To exercise any of these, email hello@clandestinehours.com. If you think we have handled your data wrongly, you can complain to the Portuguese data protection authority, the CNPD.
Who processes it for us
We use Cloudflare to host and serve the site. Cloudflare acts as our processor and may log request metadata (IP address, user agent, timestamp) as part of its infrastructure. See the Cloudflare Privacy Policy.
Cookies and storage
We set no tracking cookies. The only thing we store in your browser is your language preference (so the site remembers whether you want English or Portuguese). Our own page-view counting is cookieless and does not identify you.
Changes
If this policy changes, we update the date at the top. Material changes will be reflected here.
Contact
Questions about this policy, or about your data: hello@clandestinehours.com