Privacy Policy

Last updated: 1st August 2026

This policy explains what personal data Websites For Free collects when you use this website, why, and what rights you have over it.

Who we are

Websites For Free is a trading name of Iraida Fernandez Ochoa, operating as a sole trader (empresária em nome individual) based in Portugal.

For the purposes of data protection law, Iraida Fernandez Ochoa is the data controller responsible for your personal data.

Contact: hello@websitesforfree.eu

Information we collect

Consultation booking form. When you submit the booking form on this site, we collect the information you choose to enter: your name, business name (optional), email address, phone number (optional), preferred language, and your message. We use this solely to contact you about the free consultation you requested.

Local storage. This site uses your browser’s local storage (not cookies) to remember your cookie-consent choice. See the Cookies Policy for detail.

We do not currently use any analytics, advertising, or third-party tracking technologies on this site.

Why we process this data (legal basis)

Under the General Data Protection Regulation (GDPR), we process your booking-form data on the basis of:

• Consent — you actively choose to submit the form and its contents.
• Legitimate interest — responding to a specific request you’ve made for a service, where processing is limited to what’s needed to do so.

If we ever contact you about a service you’ve booked (rather than just replying to your enquiry), that processing is based on performance of a contract you’ve asked us to take steps toward.

How we use your information

• To respond to your consultation request and discuss the free website-building service.
• To deliver the service you’ve agreed to, if you go ahead.

We do not sell your information, and we do not share it with third parties for their own marketing purposes.

Who we share data with

We do not routinely share your personal data with third parties. The one exception is Formspree, Inc., the service we use to deliver booking-form submissions to us by email — see “International data transfers” below for detail on how that’s safeguarded. If this ever changes further, this policy will be updated to name any new provider and explain their role before any data is shared with them.

International data transfers

Booking-form submissions are processed by Formspree, Inc., a United States-based service, in order to deliver your enquiry to us by email. Formspree processes this data under Standard Contractual Clauses as its safeguard for transferring data outside the European Economic Area. All other aspects of this site are hosted and processed within the EEA.

Data retention

We retain consultation enquiries that do not proceed to a client relationship for 12 months from our last contact with you, after which they are deleted. If you become a client, your records are retained for 10 years from the end of our business relationship, in line with Portuguese commercial and tax record-keeping obligations (Código Comercial, Art. 40).

Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data (“right to be forgotten”), where applicable
• Restrict how we process your data
• Object to processing based on legitimate interest
• Data portability — receive your data in a portable format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your national data protection supervisory authority, if you believe your data has been mishandled

To exercise any of these rights, contact hello@websitesforfree.eu.

As the business is based in Portugal, the relevant supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt. Visitors based in other EU countries may also have the right to lodge a complaint with their own national authority instead, under GDPR’s cooperation rules.

Children’s privacy

This site is intended for business use and is not directed at children. We do not knowingly collect personal data from anyone under 16.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. Material changes will be reflected by updating the “last updated” date above.