01. Who is responsible
Plotline is a specialist service brand of Studio FLACH. Studio FLACH is a trade name jointly used by Lucas Antonio Flach and Stephanie Alves Flach, two self-employed independent professionals established in Portugal. Neither trade name is a separate company or legal entity.
Lucas Antonio Flach and Stephanie Alves Flach are joint controllers. They jointly determine why and how personal data is processed and share responsibility for data protection. You may exercise your rights against either controller through the contact below.
- Joint controllers
- Lucas Antonio Flach and Stephanie Alves Flach
- Professional address
- Rua dos Caleiros, n.º 89, 1.º Andar, 4900-512 Viana do Castelo, Portugal
- hello@studioflach.com
- Telephone
- +351 939 097 715
02. Information we handle
This notice covers visiting Plotline, requesting a fit review, contacting us, and becoming a client. The service is intended for businesses and adult professionals.
An enquiry may include your name, work email, practice name and website, service area, professional specialism, answers about the practice, and your message. Providing the information marked as required lets us assess and answer your request. Without it, the form may not submit or we may be unable to reply.
Website hosting and email infrastructure may process IP addresses, browser and device information, requested pages, timestamps, security signals, delivery status and server logs. If you become a client, we also handle the proposal, contract, project, communication, billing and accounting records needed for the engagement.
Please avoid sending sensitive personal data, property-owner information, survey reports, or passwords through the enquiry form.
03. Why we use it
- Answering enquiries and preparing proposals: taking pre-contractual steps at your request. When you contact us on behalf of a business, our legitimate interest is assessing and responding to relevant business enquiries.
- Delivering an agreed service: performing the contract and maintaining the professional relationship.
- Security, appropriate records and legal claims: our legitimate interests in operating and protecting the service, balanced against your rights.
- Optional website measurement: your consent to Google Analytics 4, to understand page visits and successful enquiries and improve the website. Refusing analytics does not prevent you from browsing or making an enquiry.
- Tax, accounting and other legal duties: complying with applicable legal obligations.
The fit check is guidance based on the answers you provide. It does not make a decision with legal or similarly significant effects. We review enquiries ourselves.
04. How enquiries reach us
When you accept analytics, Google Analytics 4 processes page-view and successful-enquiry events, cookie identifiers and technical information such as browser, device and approximate location. Page locations are limited to the website path, without query strings or fragments. We do not send names, email addresses, practice details, website addresses supplied in the form, messages or other form answers to Google Analytics. We do not use Google Analytics for advertising or remarketing.
Vercel hosts the website and processes form requests. Plunk delivers your enquiry to hello@studioflach.com. Namecheap Private Email handles the receiving mailbox and our replies. These providers process relevant information to provide their services.
Submitting an enquiry does not subscribe you to marketing, send an automatic confirmation email, take a payment, or create a contract. This site does not add your enquiry to a newsletter. Email open and link-click tracking are not used for the enquiry notification.
We may disclose relevant information to professional advisers or public authorities where needed for the purposes above or required by law. We do not sell or rent personal data.
Provider information: Vercel privacy notice, Vercel data processing terms, Plunk privacy notice, Plunk data processing agreement and Namecheap privacy policy, Google privacy policy and Google data processing terms.
05. International processing
We are established in Portugal. Hosting, email delivery, mailbox and, when you consent, Google Analytics providers may process information outside Portugal or the European Economic Area, including in the United States. Plunk states that primary hosted storage is in the EU/EEA, while email delivery through Amazon Web Services may transit other regions.
Restricted transfers require a valid mechanism under applicable data protection law, such as an adequacy decision or approved standard contractual clauses. The current provider notices and processing agreements linked above explain their locations and safeguards. You can contact us for more information about safeguards relevant to your data.
06. How long we keep it
Enquiries and prospective-client information are normally retained for up to 24 months after the last contact. We may delete them earlier following a valid request, or apply another retention period if you become a client or continued retention is legally required.
Client, project, contract and related communication records are kept during the relationship and, where needed for contractual, tax, accounting or legal-claims purposes, for up to 10 years afterwards. Invoice and accounting records are retained for 10 years under applicable Portuguese obligations. Records no longer needed are deleted, anonymised or securely archived when legal retention is required.
Google Analytics user-level and event-level retention is set to two months. This setting does not control standard aggregated reports, which may remain available for longer. Plotline configures analytics cookies to expire after up to six months, subject to browser limits and earlier withdrawal or deletion. Your analytics consent choice is stored locally in your browser for up to six months before we ask again.
Infrastructure and delivery logs follow the providers’ operational retention settings and policies. Plunk currently states that API request logs are deleted after 30 days. Deleting an enquiry from our active records may not immediately remove copies held in routine backups.
08. Your rights and contact
Subject to applicable legal conditions, you may request access, correction, erasure, restriction, data portability, or object to processing based on legitimate interests. Where consent is relied on, you may withdraw it without affecting earlier lawful processing.
Email hello@studioflach.com to make a request. We may need to verify your identity. We normally respond within one month; an extension may apply in complex cases as permitted by law.
You may complain to Portugal’s supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or another competent supervisory authority. Contacting us first is welcome but is not a condition of making a complaint.
We use reasonable organisational and technical security measures, although no transmission or storage method is completely secure. We will assess any breach and make notifications required by law.
This notice may change when the service or its providers change. The update date above identifies the current version. Studio FLACH’s broader services have a separate privacy policy; this notice describes the Plotline website specifically.