Privacy Policy

This Privacy Policy describes how Artecium processes personal data on the website, public forms, and Client Area.

Last updated: 25 September 2026

This document is an informational draft for the Artecium website and does not constitute legal advice. Legal review is recommended before definitive use.

1. Data controller

The Artecium brand is used by Rodrigo Tavares Martins, tax ID (NIF) 249379511, with address at Rua Armeiro Mor, N.º 14, CV Esq., 2805-093 Portugal, economic activity code (CIRS) 1519 — Outros Prestadores de Serviços, for the provision of digital services.

For privacy and data protection enquiries, contact us at [email protected].

2. Scope

This policy applies to artecium.com, the public Project Discovery Wizard, the Client Area, the internal admin area, and related services described on this website.

The application of certain rules (including distance contracting, withdrawal rights, or alternative dispute resolution) may depend on the client type, contract nature, and conditions agreed on a case-by-case basis.

3. Categories of data collected

Depending on how you interact with our services, we may process the following categories of data:

  • Identification and contact data (name, email, phone, company).
  • Account and authentication data (login credentials, user ID, language and currency preferences).
  • Data submitted through the Discovery Wizard (project type, budget, timeline, referral source, description, preferred contact method).
  • Client and project data in the Client Area (contractual information, communications, documents, tasks, meetings, and feedback).
  • Financial data (invoices, payments, transaction references; we do not store full card details).
  • Technical and usage data (traffic measurement and analytics, when consented).
  • Support data (tickets, messages, and attachments).

4. Discovery Wizard

When you use the public project discovery form, we collect the data you voluntarily provide. If you choose email contact, that data is sent via transactional email to our internal inbox through the configured email provider (Resend or, alternatively, SendGrid).

At this stage, data submitted through the Discovery Wizard is not automatically stored in the platform database. WhatsApp contact redirects you to the WhatsApp application (Meta), where the conversation takes place outside this website.

Before submission, you must confirm that you have read and accept this Privacy Policy and consent to processing your data to respond to your request.

5. Client Area

The Client Area uses Supabase authentication. We may process profile data, associated companies, projects, services, documents, invoices, payments, notifications, meetings, aggregated analytics, aggregated SEO data, reports, support, and feedback, depending on features available to each client.

Access is restricted to authenticated users and subject to platform access controls.

6. Purposes of processing

  • Provide, manage, and improve contracted services.
  • Respond to contact requests and commercial opportunities.
  • Manage client accounts, projects, billing, and payments.
  • Communicate with clients about services, support, and deliverables.
  • Ensure security, authentication, and technical operation of the website and platform.
  • Measure website usage and improve experience when the user consents to analytics.
  • Comply with applicable legal, tax, and accounting obligations.

8. Technology providers and subprocessors

To operate the website and platform, we use service providers that may process data on our behalf or as independent controllers, including:

  • Supabase — authentication, database, and file storage.
  • Stripe — payment processing and checkout.
  • Resend — transactional email (configurable alternative: SendGrid).
  • Vercel — website hosting and infrastructure, where applicable.
  • Google Analytics — traffic measurement, only after analytics consent.
  • Microsoft Clarity — behavioural analytics, only after analytics consent.
  • WhatsApp / Meta — when the user chooses WhatsApp contact.

This list reflects integrations identified in the website code. Other providers may be used for specific client projects as contractually agreed.

9. International transfers

Some listed providers may process data outside the European Economic Area. Where this occurs, legally required safeguards will be applied, such as standard contractual clauses or other mechanisms provided under applicable law.

The exact processing location for each provider depends on account configuration and the service region contracted, and is not always determinable from this website alone.

10. Cookies and similar technologies

We use cookies and similar technologies for operation, preferences, and analytics. Optional analytics cookies (Google Analytics and Microsoft Clarity) are only loaded after the user grants consent through the website cookie management system.

For detailed information, see our Cookie Policy.

11. Data subject rights

Under applicable law, data subjects may exercise rights of access, rectification, erasure, restriction, objection, portability, and withdrawal of consent, where applicable.

You may also lodge a complaint with the competent supervisory authority, including the Portuguese Data Protection Authority (CNPD), if you believe processing violates applicable law.

12. How to exercise your rights

To exercise your rights or ask privacy questions, contact us at [email protected], stating the nature of your request and information that helps identify the relevant relationship or interaction.

We will respond within applicable legal timeframes and may request additional information to verify identity when necessary.

13. Security

We implement appropriate technical and organisational measures to protect personal data, including authentication, access controls, database security policies, and encrypted communications where applicable.

No system is completely risk-free. In the event of an incident with relevant impact on data subjects, we will take measures required under applicable law.

14. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, tax, accounting, contractual, and dispute-resolution obligations.

Specific periods may vary by data category, commercial relationship, and applicable legal requirements. When no longer necessary, data will be deleted or anonymised unless legal retention is required.

15. Changes to this policy

We may update this Privacy Policy to reflect legal, technical, or operational changes. The version published on this page shows the last update date.

16. Contact

Artecium — commercial brand of Rodrigo Tavares Martins

Tax ID (NIF): 249379511

Address: Rua Armeiro Mor, N.º 14, CV Esq., 2805-093 Portugal

Email: [email protected]