Privacy Policy
Last updated: March 25, 2026
LAVITU ("we," "us," "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information. It complies with the EU General Data Protection Regulation (GDPR) 2016/679 and Portuguese data protection law.
1. Introduction
This policy explains what data we collect, how we use it, and the rights you have over it. By using our website and services, you acknowledge the practices described here.
2. Data Controller
LAVITU is the data controller responsible for your personal data. For any privacy-related inquiries, contact us at info@lavitu.com or on WhatsApp at +351 963 702 910.
3. Information We Collect
Information you provide directly: name, business name, email address, phone number, social media handles, photos and videos, business information, and payment details.
Information collected automatically: IP address, browser type, pages visited, and referral source.
4. How We Use Your Information
We use your information to deliver our services, manage your subscription, communicate with you about your account, post to your social media accounts, improve our services, send marketing (with your consent), and comply with legal obligations.
5. Legal Basis for Processing
We process your data on the basis of contract performance, our legitimate interests, your consent, and our legal obligations.
6. Data Sharing
We do not sell your personal data. We share data only with payment processors, hosting providers, AI tools, the social media platforms you ask us to post to, and legal authorities where required. All third parties are bound by GDPR-compliant data processing agreements.
7. International Data Transfers
Where service providers are located outside the European Economic Area, we protect your data using Standard Contractual Clauses or other approved transfer mechanisms.
8. Data Retention
We retain active client data for the duration of your subscription plus 12 months; content files for 6 months after delivery; billing records for 7 years; and marketing contacts until you withdraw consent.
9. Your Rights Under GDPR
You have the right to access, rectify, erase, restrict, or port your personal data, to object to processing, and to withdraw consent at any time. We respond to requests within 30 days.
10. Cookies
Our website may use cookies and similar tracking technologies. You can control your preferences through your browser settings, though essential cookies cannot be disabled.
11. Security
We implement appropriate technical and organisational measures, including encryption and access controls, to protect your data. However, no method of transmission over the internet is completely secure.
12. Children's Privacy
Our services are not directed at individuals under the age of 18. If we learn that we have collected data from a child, we will delete it promptly.
13. Changes to This Policy
We may update this policy from time to time. Updates are posted with a new date, and material changes are communicated by email or via our website.
14. Complaints
If you have concerns about how we handle your data, you may file a complaint with Portugal's data protection authority, the Comissao Nacional de Protecao de Dados (CNPD), at www.cnpd.pt.
15. Contact
For any questions about this Privacy Policy, contact us at info@lavitu.com, on WhatsApp at +351 963 702 910, or on Instagram at @lavitu.studio.