Skip to content

Privacy Policy

How Lavva handles the personal data you share through this website, and the choices you have. Last updated October 31, 2026.

1. Who we are

This website, lavva.pt, is run by Lavva - Digital Agency, Lda. ("Lavva", "we"), a company registered in Portugal with tax number (NIPC) 514567503 and its registered office at Rua da Capôa, 9, Aradas, 3810-408 Aveiro, Portugal. Lavva is the controller of the personal data described in this policy.

Our studio is at PCI – Creative Science Park Aveiro Region, Via do Conhecimento, Edifício Central, 3830-352 Ílhavo, Portugal. For anything about your data, write to hello@lavva.pt. The law does not require us to appoint a Data Protection Officer, so we have not; that address reaches the people responsible for privacy at Lavva.

2. What we collect and why

We only collect what you choose to send us, what you allow in the cookie banner, and the minimum a website needs to run safely.

When you contact us

The Let's Talk form asks for your name, your email, and a few lines about your project. Your company, its website, and how you heard about us are optional. We use them to read your request, reply, and, if it makes sense, prepare a proposal. The legal basis is taking steps at your request before a possible contract, and our legitimate interest in answering business inquiries (GDPR, Article 6(1)(b) and (f)). Without your name, email, and project details, we cannot reply.

The same applies to the emails you send us directly.

Our newsletter

You can subscribe with your email in the footer of any page, or by ticking the newsletter box on the Let's Talk form, which also gives us your name. We add you to our mailing list to send you portfolio updates, articles, and insights on strategy, culture, and brand. Our newsletter records whether you opened it and which links you clicked, so we can see what is useful. The legal basis is your consent (Article 6(1)(a)). Every newsletter has an unsubscribe link, and you can also ask us at hello@lavva.pt.

Website statistics and recordings

With your permission, we use Umami, an analytics tool we host ourselves, to understand how this site is used. It counts, in aggregate, the pages viewed, the site you came from, and your type of browser, device, and country. It also builds maps of where visitors click and how far they scroll, and it may record your visit so we can replay it: what appeared on the page, the pages you went through, and how you scrolled and clicked, for up to 5 minutes at a time. What you type into form fields is hidden from these recordings. We use them only to find problems and improve the site, and we do not try to identify you from them. Umami sets no cookies and does not store your IP address. It only runs after you accept statistics and recordings in the cookie banner (Article 6(1)(a)), and you can change your choice at any time under Cookie preferences, at the bottom of every page.

Technical logs

Like any website, ours records technical data with each request, such as the IP address, the date and time, the page requested, and the browser. We use it only to keep the site secure and working (legitimate interest, Article 6(1)(f)).

3. Cookies and similar technologies

We use no advertising or tracking cookies. The only thing this site stores on your device is your cookie choice: a cookie and a local storage entry, both named c15t, kept for 12 months so the banner does not ask again on every visit. They are strictly necessary, and they are only set once you make a choice.

4. Who we share your data with

We never sell your data or share it for advertising. Contact requests are stored in Svalla, the content management system we develop and run ourselves. Beyond that, only the service providers we need to run the site handle your data, under agreements that bind them to our instructions (Article 28 of the GDPR):

  • OVHcloud, which hosts this website, its technical logs, and our statistics and recordings;
  • HubSpot (HubSpot Ireland Limited, Ireland), which keeps our mailing list and sends the newsletter, only if you subscribe;
  • WebHS (WebSP - Comércio e Prestação de Serviços Informáticos, Lda., Portugal), which hosts our email at hello@lavva.pt.

We may also disclose data when the law requires it, for example to a court or a public authority.

5. Transfers outside the European Union

We keep our mailing list in the European Union. HubSpot companies outside the EU, including in the United States, may process it to provide and support the service. Those transfers rely on the safeguards the GDPR requires, such as the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.

6. How long we keep it

  • Contact requests: up to 2 years after our last exchange, unless they lead to a project, in which case we keep them for as long as the work and our legal obligations require.
  • Newsletter: until you unsubscribe.
  • Statistics and click and scroll maps: aggregate figures that do not identify you.
  • Session recordings: 30 days.
  • Your cookie choice: 12 months.
  • Technical logs: one month.

7. Your rights

You can ask us to access, correct, or delete your data, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time; this does not affect what we did before. We make no decisions about you based solely on automated processing.

To exercise any of these rights, write to hello@lavva.pt. We reply within one month, free of charge. If you believe we have not handled your data properly, you can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt).

8. Security

We protect your data with appropriate technical and organizational measures, including encrypted connections (HTTPS), access limited to the people who need it, and providers bound by confidentiality.

This site links to other websites, such as our social media profiles. This policy only covers lavva.pt; those sites have their own.

10. Changes to this policy

We may update this policy when the site or the law changes. The date at the top always shows the current version.