Privacy Policy
Last updated: August 2026
1. Who we are and how to contact us
QFILM LDA (trading as QFILM Studio)
Registered address: [FULL ADDRESS — TO COMPLETE]
VAT number: [VAT — TO COMPLETE]
Email: qfilm@qfilm.pt
Website: https://qfilm.pt
QFILM LDA is the data controller responsible for the personal data collected through the qfilm.pt website and in connection with our wedding photography and videography services.
2. What personal data we process and why
2.1. Contact forms and quote requests
When you send us a message or request a quote, we process: your name, email address, phone number (if provided), event date and location, and the content of your message.
- Purpose: To respond to your enquiry or service proposal request
- Legal basis: Pre-contractual measures (Art. 6(1)(b) GDPR) and/or legitimate interests (Art. 6(1)(f) GDPR) — our legitimate interest in responding to enquiries received
- Retention period: 12 months from last contact, unless a contract is concluded
2.2. Service contracts (wedding photography and videography)
In the context of contracts we enter into, we process: full name, contact details (email, phone), tax identification number (where required for invoicing), event details (date, venue, ceremony type), and other data shared in connection with the delivery of our services.
- Purpose: Contract performance; invoicing; compliance with legal obligations
- Legal basis: Contract performance (Art. 6(1)(b) GDPR); Legal obligation (Art. 6(1)(c) GDPR) for tax and accounting purposes
- Retention period: 10 years (legal obligation under Portuguese commercial and tax law)
2.3. Online shop orders (WooCommerce)
When you place an order in our online shop, we process: name, billing and delivery address, email address, phone number, and payment details (processed securely by an external payment service provider — we do not store card data on our servers).
- Purpose: Order processing and fulfilment; invoicing; customer support
- Legal basis: Contract performance (Art. 6(1)(b) GDPR); Legal obligation (Art. 6(1)(c) GDPR) for tax purposes
- Retention period: 10 years (legal obligation under Portuguese tax and commercial law)
2.4. Marketing communications (newsletter)
If you choose to receive our newsletter, we process: your name and email address.
- Purpose: Sending commercial communications, news and photography inspiration
- Legal basis: Consent (Art. 6(1)(a) GDPR) — you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal
- Retention period: For as long as you maintain active consent; deleted within 30 days of consent withdrawal
3. Cookies and tracking technologies
For detailed information about the cookies used on this website, please see our Cookie Policy.
4. Who we share your data with
Your personal data may be shared, strictly to the extent necessary, with:
- Technical service providers: web hosting company (website and data hosting) and email service provider
- Payment processor: payment gateway provider used to process transactions in our online shop (payment data is processed directly by the provider and does not pass through our servers)
- Accountants and tax authorities: in compliance with our legal obligations
We do not sell, transfer or rent your personal data to third parties for commercial purposes.
5. International data transfers
Some of our technical service providers may process data outside the European Economic Area (EEA). When this occurs, we ensure that appropriate safeguards are in place, in particular standard contractual clauses approved by the European Commission, in accordance with Art. 46 GDPR.
6. Your rights as a data subject
Under the GDPR (Regulation (EU) 2016/679) and Portuguese Law no. 58/2019 of 8 August, you have the following rights:
- Right of access (Art. 15 GDPR): Obtain confirmation that your data is being processed and access to information about that processing.
- Right to rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17 GDPR): Request deletion of your data, where legally applicable (“right to be forgotten”).
- Right to restriction of processing (Art. 18 GDPR): Request temporary suspension of the processing of your data in certain circumstances.
- Right to data portability (Art. 20 GDPR): Receive your data in a structured, commonly used and machine-readable format.
- Right to object (Art. 21 GDPR): Object to processing based on legitimate interests or for direct marketing purposes.
- Rights related to automated decision-making (Art. 22 GDPR): Not to be subject to decisions based solely on automated processing that produce significant legal effects. We do not carry out any automated processing of this nature.
To exercise any of these rights, please contact us by email: qfilm@qfilm.pt. We will respond to your request within 30 days of receipt. For complex or numerous requests, this period may be extended by a further two months, with prior notice.
7. Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with the competent data protection supervisory authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD):
- Website: www.cnpd.pt
- Email: geral@cnpd.pt
- Address: Rua de São Bento, 148 – 3rd floor, 1200-821 Lisbon, Portugal
- Phone: +351 213 928 400
If you are based in another EU/EEA member state, you may also lodge a complaint with the supervisory authority in your country of residence.
8. Data security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, accidental loss or destruction. Our website uses HTTPS encrypted connections for all communications.
9. Minors
Our services are not intended for persons under 16 years of age. We do not intentionally collect personal data from minors. If you become aware that a minor has provided us with personal data without parental or guardian consent, please contact us at qfilm@qfilm.pt so that we can delete the information.
10. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy to reflect legal, technical or business changes. The most recent version will always be available at qfilm.pt/privacy-policy/. For significant changes, we will notify our clients by email. We recommend that you check this page periodically.
