PRIVACY
Privacy Policy
This Privacy Policy explains what personal information SHOT BY JOÃO collects, why it is used and how it is handled when you visit the website or send a project enquiry.
Last updated: 29 September 2026
Who is responsible for your data
João Pedro Cardoso Magalhães, trading as SHOT BY JOÃO, is responsible for the personal information collected through this website and during project enquiries.
For privacy questions or requests, contact joao@shotbyjoao.agency.
Information I collect
When you send an enquiry through the website, the information collected may include:
- Name
- Email address
- Brand
- Website
- How you would like to work
- The type of content you need
- Preferred project timing
- Approximate budget
- Project brief
- Links you choose to provide
The website also records basic submission information such as the page the enquiry came from, the CTA used to open the form and the date and time of submission.
Why I use this information
The information you provide is used to:
- Respond to your enquiry
- Understand the project and prepare a proposal
- Assess timing, scope and production requirements
- Communicate with you about potential or active work
- Organise enquiries internally
- Maintain necessary business and project records
- Protect the website and enquiry process from misuse
Project enquiry information is primarily processed because it is necessary to take steps towards a potential working relationship requested by you.
Certain basic records may also be processed where necessary for legitimate business, administrative or security purposes.
Enquiry details are not used to subscribe you automatically to a newsletter or promotional mailing list.
How enquiries are processed
Website enquiries are sent to Make, an automation service, to organise incoming project enquiries. The website code does not identify any downstream data-storage or messaging services connected to the Make workflow; those destinations depend on its current configuration. If the workflow sends email, an email delivery provider may also process the information needed for that message, but its identity is not confirmed in this project.
Only information reasonably necessary for each part of the workflow should be sent or stored. The workflow may assign an internal priority based on project type, timing or budget to help organise enquiries. It does not make legal or similarly significant decisions about you.
Service providers
Personal information may be processed by third-party services needed to operate the website and enquiry workflow. The current website uses Make for enquiry automation, Fontshare to load website fonts, Cloudinary to host and deliver website imagery and video, and Vercel to host the website and provide privacy-focused, cookieless traffic and performance measurements. The website code does not confirm Google Sheets or Telegram as part of the active workflow.
Make receives the details submitted through the enquiry form. Fontshare and Cloudinary receive the technical information involved in loading their website resources. Vercel Analytics and Speed Insights may process page URL, referrer, approximate location, device, browser and operating-system information, plus page performance measurements, to report aggregate traffic and real-world performance. They do not use cookies to identify visitors. See Vercel Analytics privacy information and Vercel Speed Insights privacy information. An email delivery provider or additional storage or messaging provider may also be involved if configured in the Make workflow; the current project does not identify those providers.
International processing
Some service providers may process information using infrastructure located outside Portugal or the European Economic Area.
Where international transfers of personal data require safeguards under applicable data protection law, the relevant provider mechanisms and legal safeguards apply.
How long information is kept
Enquiry information is kept only for as long as reasonably necessary to respond to the enquiry, manage a potential or active client relationship, maintain relevant business records and comply with legal obligations.
If an enquiry becomes a client project, relevant information may form part of the project and business records for the period required for contractual, accounting or legal purposes.
Your rights
Depending on the circumstances, you may have the right to request access to your personal data, correction of inaccurate information, deletion, restriction of processing, portability or objection to certain processing.
Where processing is based on consent, consent may be withdrawn where applicable.
To make a privacy request, contact joao@shotbyjoao.agency.
You may also have the right to lodge a complaint with the relevant data protection authority.
Cookies and analytics
The website uses Vercel Analytics and Speed Insights for aggregate traffic and performance measurement. These services are designed to operate without cookies. The website does not currently use advertising tracking or non-essential analytics cookies.
Essential technical storage may still be used where necessary for the website to function.
Changes to this policy
This policy may be updated when the website, services or data-processing tools change. The latest version will always be published on this page.