Privacy Policy

1. Who we are

Joolomee is the trading name of Joana Lopes Mesquita, a freelance designer and creative director based in Portimão, Algarve, Portugal. The website joolomee.com is the controller of any personal data processed through it. You can reach the controller at rememberme@joolomee.com.

2. What data we collect

• Contact form / email: name, email, company, message content — only what you provide.
• Technical data: IP address, browser type, viewport size, and pages visited, anonymously aggregated for analytics.
• Cookies: only strictly-necessary cookies and aggregated, anonymous analytics. No advertising or cross-site tracking.

We do not sell or share personal data with third parties for marketing. We do not run advertising pixels (no Meta Pixel, no Google Ads tags).

3. How we use it

• Reply to your message or proposal request.
• Deliver and improve services contracted with you.
• Improve the website (aggregate analytics, no individual profiling).
• Comply with legal obligations (e.g. invoicing in Portugal).

4. Legal basis (GDPR Art. 6)

We rely on (a) your consent when you submit a form, (b) the performance of a contract when you become a client, (c) our legitimate interest in maintaining the website, and (d) legal obligations for accounting purposes.

5. How long we keep it

• Prospect enquiries: up to 24 months from the last interaction, then deleted.
• Client records (invoices, contracts): 10 years, per Portuguese tax law.
• Analytics data: aggregated, no individual retention beyond the rolling 14 months.

6. Your rights (GDPR Art. 15–22)

You can at any time request:

• Access to the data we hold about you
• Rectification of inaccurate data
• Erasure ("right to be forgotten")
• Restriction of processing
• Data portability (machine-readable copy)
• Objection to processing

Email rememberme@joolomee.com and we respond within 30 days. You may also lodge a complaint with the Portuguese data protection authority (CNPD).

7. Sub-processors

The website runs on the following third-party services. We share only what is strictly necessary:

• Vercel Inc. (USA) — hosting and edge delivery
• Google LLC (Google Workspace) — email delivery
• GitHub Inc. (USA) — source code repository

All sub-processors are GDPR-compliant under the EU–US Data Privacy Framework.

8. International transfers

Some sub-processors are based in the USA. Transfers are governed by Standard Contractual Clauses and the EU–US Data Privacy Framework adequacy decision (2023).

9. Security

joolomee.com is served exclusively over HTTPS with HSTS preload, a strict Content-Security-Policy, COOP, CORP, and a permissive Permissions-Policy disabling sensitive browser APIs. Source code is private; sourcemaps in production are gated behind Vercel authentication.

10. AI & agent usage

This site declares its AI preferences via Content-Signal directives in robots.txt: no LLM training (ai-train=no), no live inference grounding (ai-input=no), but search indexing is welcome (search=yes). We publish a full llms.txtand agent-discovery metadata under /.well-known/.

11. Changes

We will publish any material changes on this page and update the date above. Continued use after a change constitutes acceptance.