Privacy
& cookies

1. Who is responsible

The data controller is Tiago Martins, trading as TiagoShoots, Portugal. [CONFIRM: full legal name, NIF and registered address]

Questions, or to exercise any right below: collabs@tiagoshoots.com.

2. What this site collects

Nothing at all unless you submit something. There is no analytics, no advertising, no tracking pixel and no profiling on this site.

• Project enquiry form. Name, company, email, service, budget range and your message.
• Waitlist. Your email address only.
• Server logs. My host records IP address and browser details for security and to keep the site running. Standard, and not linked to anything else.

3. Why, and on what legal basis

• Answering your enquiry — consent, which you give by ticking the box, and my legitimate interest in replying to someone who contacted me.
• Waitlist emails — consent, given separately. Nothing is sent unless you opt in, and every email carries an unsubscribe link.
• Security and hosting logs — legitimate interest in keeping the site available and secure.

Consent to marketing is never a condition of getting a quote. The two are separate boxes for exactly that reason.

4. How long it is kept

• Enquiries that do not become projects: 24 months, then deleted. [CONFIRM]
• Project records: as long as tax and accounting law requires. [CONFIRM with your accountant]
• Waitlist: until you unsubscribe.
• Server logs: as retained by the host. [CONFIRM with Hostinger]

5. Who else sees it

I do not sell or trade personal data. Ever. It reaches three kinds of processor:

• Hosting — Hostinger, which stores the site and its logs.
• Nothing else. Form submissions are handled by a script on my own hosting and emailed straight to me. No third-party form service is involved.
• Email — my email provider, to receive and reply.

Transfers outside the EEA. My hosting and email are provided within the EEA. If that changes I will update this page. [CONFIRM your Hostinger data centre region]

6. Cookies

This site sets no cookies of its own. No analytics, no advertising, no session tracking.

One piece of local storage is used: your choice on the consent banner, so it is not shown again. That is strictly necessary and needs no consent under the ePrivacy Directive.

7. Embedded video

Portfolio pieces hosted on YouTube play in a window on this page. Nothing loads from YouTube until you accept embedded media and then click a video. Decline and those pieces open on youtube.com in a new tab instead, where their own terms apply.

When the player does load, it uses youtube-nocookie.com, Google's restricted mode, which will not store data on your device until you actually press play.

8. Your rights

Under the GDPR you can ask me to give you a copy of your data, correct it, delete it, restrict what I do with it, hand it to another provider, or stop processing it altogether. You can withdraw consent whenever you like, which does not affect anything done before you withdrew it.

Email collabs@tiagoshoots.com and I will respond within one month.

If you are not satisfied, you can complain to the Portuguese supervisory authority, the Comissão Nacional de Protecção de Dados (CNPD), or to the authority where you live.

9. Visitors outside the EU

I apply the same standard everywhere. If your local law gives you stronger rights, such as the CCPA in California, those apply too. I do not sell or share personal information as those laws define it.

10. Changes

If this policy changes materially I will update the date at the top of the page. Last updated August 2026.

Change cookie choice