Last updated: 14 October 2026
1. Controller
[to fill in under Settings], tax number [to fill in under Settings], [to fill in under Settings]. Privacy contact: [to fill in under Settings].
2. People asking for quotes
Data: name, email, mobile, area and address of the job, job description, photos and notes you add, messages with painters, your acceptance of a quote and the review you leave.
- Why: to send the request to the painters who take it, confirm your contact with a code, and allow messages, quotes and reviews.
- Legal basis: steps at your request and performing the service (Art. 6(1)(b) GDPR); legitimate interest in security and fraud prevention (f); your consent for the repaint reminder.
- Who sees it: only the painters who take the request, at most the number you chose. Once they take it, each painter processes your data as a controller in their own right.
- How long: finished requests are anonymised after 24 months. You can erase your data earlier on the request page.
3. Painters
Data: identity and contact details, tax number, areas and services, profile photos and texts, documents provided (insurance, licences; only our team sees them), history of requests, quotes, credits, payments and invoicing.
- Legal basis: performance of the contract; legal obligations, including tax (invoicing data is kept for 10 years); legitimate interest in publishing the profile and reviews and in preventing fraud.
4. Paint shops
We publish the shop's details (name, address, phone, hours, website, brands and services). The name and email of whoever registers the shop are used only to confirm it and for notices about the page; they are not published. Legal basis: legitimate interest in keeping a useful, accurate list. The shop can ask for correction or removal at any time, at [to fill in under Settings]. Requests and applications made through a shop's QR code are linked to that shop, with no extra personal data and no cookies.
5. Clients recorded by painters
When a painter uses the Clients tool for their own clients, the painter is the controller and we are the processor (see the annex to the Terms for painters). To exercise your rights over that data, contact the painter; we help if needed.
6. Service providers
- Website and email hosting: SiteGround (servers in the European Union).
- SMS and WhatsApp sending, if enabled: Twilio. This may involve a transfer to the USA under the European Commission's standard contractual clauses.
- Authorities, when the law requires it.
We do not sell data or use it for third-party advertising.
8. Your rights
You can ask for access, rectification, erasure, restriction, portability, and object to processing, by writing to [to fill in under Settings]. We reply within one month. You can also complain to the Portuguese data protection authority (CNPD).
9. Security
Encrypted connection (HTTPS), documents stored outside the public area of the site, restricted access and backups.
10. Changes
If we change this policy we update the date at the top and, for significant changes, email people with an account.