Privacy Policy

Last updated: 6 July 2026

This website, www.vast.pt, is operated by Vast Studio (“Vast”, “we”), Avenida do Brasil 24, 6 esq., 1700-069 Lisbon, Portugal. This policy explains what personal data we collect when you use our website, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR).

Information we collect

When you submit our contact form we collect the details you provide: your name, email address and company name. In addition, our website automatically processes limited technical data — such as your IP address, browser type and pages visited — through the analytics and advertising services described below, and only after you have given consent.

How we use your information

We use contact form data solely to respond to your enquiry and to discuss a potential collaboration. We use analytics data to understand how visitors use our website and to improve it, and advertising data to measure the effectiveness of our marketing campaigns. We never sell your personal data.

Cookies, analytics and advertising

With your consent, we use Google Analytics 4 to collect statistics about how the site is used, and Google Ads conversion measurement to understand whether our advertising brings visitors to the site. These services set cookies only after you accept them in our cookie banner. You can change or withdraw your consent at any time via the “Cookie settings” link in the footer. If you decline, only cookieless, aggregated signals are sent to Google (Consent Mode) and no advertising cookies are stored on your device.

Legal bases

We process contact form data on the basis of our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR) and, where discussions progress, to take steps prior to entering into a contract (Art. 6(1)(b)). Analytics and advertising cookies are used only with your consent (Art. 6(1)(a)), which you may withdraw at any time.

Data sharing and retention

Your data is processed by service providers acting on our behalf: Webflow (website hosting and form processing), Google (analytics and advertising) and Cloudflare (content delivery and security). Some of these providers may process data outside the EEA under the European Commission’s adequacy decisions or Standard Contractual Clauses. We keep contact form submissions for as long as needed to handle your enquiry and up to 24 months thereafter; analytics data is retained according to our Google Analytics settings (14 months).

Your rights

Under the GDPR you have the right to access, rectify or erase your personal data, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. You also have the right to lodge a complaint with the Portuguese supervisory authority, CNPD (www.cnpd.pt).

Contact

For any privacy-related questions or to exercise your rights, email us at [email protected].