Last updated:
Privacy Policy
José Carvalho Ceramics respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how personal information is collected and used when you visit this website, contact us, make an enquiry or book one of our workshops, courses or other services.
01
Who is responsible for your data?
This website is operated by Horizonte de Papel, Lda., trading as José Carvalho Ceramics.
Horizonte de Papel, Lda. is the data controller responsible for personal data processed through this website.
For privacy enquiries or to exercise your data protection rights, please contact:
José Carvalho
Email: jose@josecarvalhoceramics.com
02
Information we collect
We only collect personal information that is reasonably necessary to respond to enquiries, manage bookings and provide our services.
When you use our contact or workshop enquiry forms, we may collect information including:
- your name;
- email address;
- telephone number, where provided;
- country;
- type and subject of your enquiry;
- your message;
- preferred method of contact;
- workshop or programme selected;
- preferred dates and times;
- number of participants;
- relevant pottery experience; and
- any other information you choose to provide in your message.
We may also receive technical information associated with use of the website, such as IP address, browser information and requests made to the website, through our hosting provider.
If you request marketing communications, we may also process your email address, your name where applicable, your marketing preference and limited evidence of your request and confirmation. This evidence may include the dates and times of the confirmation request and confirmation, the version of the consent wording, the source or form through which consent was requested, and the confirmation or consent status.
03
How we use your information
We may process your personal data to:
- respond to enquiries;
- arrange studio visits;
- manage workshop, course and residency enquiries and bookings;
- manage commissions, collaborations and exhibition enquiries;
- communicate with you about services you have requested;
- send marketing communications where you have separately consented to receive them;
- process and administer payments where applicable;
- maintain appropriate business, accounting and transaction records;
- protect the website against misuse or fraud; and
- comply with applicable legal obligations.
Depending on the circumstances, the legal basis for processing may be taking steps at your request before entering into a contract, performing a contract with you, complying with a legal obligation, pursuing our legitimate interests in operating and protecting our business, or your consent where consent is specifically requested.
Marketing emails are based on your consent. Marketing consent is optional and separate from making an enquiry, requesting a workshop, making a booking or purchasing services. Refusing marketing consent does not affect your ability to use our enquiry, booking or other services.
04
Contact and workshop forms
Our website uses Netlify Forms to process contact and workshop enquiries.
Information submitted through these forms is transmitted to and stored through Netlify's infrastructure. We may also receive an email notification when a form is submitted.
We do not operate a separate customer database through the website itself.
General contact and workshop submissions are treated as temporary website submissions. Our intended retention period for general enquiries that do not result in a continuing business relationship is approximately 30 days.
The automated deletion mechanism is currently being tested in dry-run mode and does not delete submissions automatically. Until it is activated, submissions may be reviewed and removed manually in accordance with the same retention objective.
Where an enquiry results in a booking, purchase, commission or other business relationship, necessary information may be copied into a separate operational, booking, contractual or accounting record and retained for the appropriate operational or legal period. The original Netlify form submission remains subject to the temporary-form retention objective.
05
Bookings through Cal.com
Some workshops, courses and private tuition sessions are booked through Cal.com.
Cal.com is an external service. When you select a Cal.com booking link, you leave the José Carvalho Ceramics website and interact directly with Cal.com's platform.
Cal.com may collect information necessary to arrange your booking, together with technical information relating to your use of its service.
The information collected directly by Cal.com is also subject to Cal.com's own privacy practices.
06
Payments and Stripe
Payments associated with certain bookings may be processed using Stripe, including where Stripe is made available through our external booking system.
Payment card information is processed through Stripe's payment infrastructure.
José Carvalho Ceramics does not receive or store your full payment card details through this website.
We may receive information necessary to administer a transaction, such as confirmation that payment has been made, the amount paid and information required to associate the payment with your booking.
Payment and transaction records may need to be retained for periods required by applicable accounting, tax or other legal obligations.
07
Marketing communications
You may optionally request occasional emails from José Carvalho Ceramics about exhibitions, new work, workshops, courses, artist residencies and future studio events. This choice is optional and separate from making an enquiry or booking.
If you select the marketing option, we send a confirmation email. Your marketing subscription is completed only after you confirm your email address. Until then, your request is not treated as confirmed marketing consent and you will not receive marketing campaigns.
We use Brevo to manage the confirmation process, marketing contacts and marketing email delivery. We retain limited evidence of the request and confirmation, including relevant dates and times, the consent wording version, the source of the request and confirmation status.
You can withdraw your consent or unsubscribe at any time using the unsubscribe link in our marketing emails or by contacting us. A normal enquiry or booking request does not override a previous unsubscribe or suppression choice.
08
OpenStreetMap
The Contact page contains an embedded map provided by OpenStreetMap.
When the map is loaded, your browser may communicate directly with OpenStreetMap's infrastructure. This may involve transmitting technical information such as your IP address, browser information and the map resources requested.
Our production testing did not identify cookies being stored by the OpenStreetMap embed at the time this Privacy Policy was prepared.
09
Cookies and analytics
At the date of this Privacy Policy, the José Carvalho Ceramics website does not use analytics or advertising tracking technologies such as Google Analytics, Google Tag Manager, Meta Pixel or similar services.
Netlify Web Analytics and Netlify Real User Monitoring are not enabled.
Our production testing did not identify cookies being stored by the José Carvalho Ceramics website itself or by the OpenStreetMap embed.
External websites that you choose to visit — including Cal.com, Stripe, Instagram or Google Maps — may use their own cookies or similar technologies once you access their services. Their use of those technologies is governed by their respective privacy policies.
10
Sharing your information
We do not sell your personal information.
Personal information may be shared with service providers where necessary to operate the website or provide a service you have requested.
These may include, as applicable:
- Netlify — website hosting and form processing;
- Brevo — marketing confirmation, marketing-contact management and marketing email delivery;
- Cal.com — booking and scheduling;
- Stripe — payment processing;
- email and communications providers; and
- other professional or technical providers where reasonably necessary.
We may also disclose information where required by law or where necessary to establish, exercise or defend legal claims.
11
International data transfers
Some of our service providers may process personal data outside Portugal or the European Economic Area. Where international processing occurs, the relevant provider applies safeguards required by applicable data-protection law, which may include an applicable adequacy framework, Standard Contractual Clauses and supplementary measures.
Brevo states that its database hosting infrastructure is located within the European Union, although Brevo, its affiliates or subprocessors may carry out certain processing internationally under the safeguards described in its data-processing terms. Netlify may also process personal data internationally and describes the applicable transfer safeguards in its Data Processing Agreement.
12
How long we keep your information
We aim to retain personal information only for as long as necessary for the purpose for which it was collected.
In particular:
General contact and workshop submissions:
Our intended temporary retention period for general enquiries that do not result in a continuing business relationship is approximately 30 days.
The automated deletion mechanism is currently being tested in dry-run mode and does not delete submissions automatically. Until it is activated, submissions may be reviewed and removed manually in accordance with the same retention objective.
Bookings, commissions, purchases and other business records:
If an enquiry becomes a booking, commission, purchase or other business relationship, necessary information may be copied into an appropriate separate operational, contractual, business or accounting record. Those records may be retained for as long as necessary to provide the service and for any period required by applicable accounting, tax or other legal obligations. The original Netlify form submission remains subject to the temporary-form retention objective.
Unconfirmed marketing requests:
Marketing confirmation requests remain pending for up to 7 days. If confirmation is not completed, the request expires and is removed from the pending confirmation process. An expired request is not treated as confirmed marketing consent.
Confirmed marketing contacts:
Confirmed marketing-contact information and limited consent evidence are retained while consent remains active and as reasonably necessary to operate the mailing list and document consent.
Withdrawal and unsubscribe records:
Marketing communications stop after you withdraw your consent or unsubscribe. We may retain the minimum information reasonably necessary to document your withdrawal or unsubscribe and prevent accidental marketing or resubscription.
13
Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
14
Your data protection rights
Subject to the conditions provided by applicable law, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete information;
- request deletion of your personal data;
- request restriction of processing;
- receive certain personal information in a portable format;
- object to certain processing, including direct marketing; and
- withdraw consent at any time where processing is based on consent.
To exercise your rights, contact:
You may withdraw marketing consent at any time through the unsubscribe link in our marketing emails or by contacting us. Withdrawal does not affect processing lawfully carried out before it was received.
We may need to verify your identity before responding to a request.
15
Complaints
If you have concerns about how we process your personal information, please contact us first so that we can try to resolve the matter.
You also have the right to lodge a complaint with the Portuguese data protection authority:
Comissão Nacional de Proteção de Dados (CNPD)
Official website:
https://www.cnpd.pt/
16
External websites
Our website contains links to external services and websites, including Cal.com, Instagram and Google Maps.
Once you leave our website, the collection and processing of information by those services is governed by their own privacy policies and practices.
17
Children and family workshops
Family workshops may involve children, but bookings and enquiries relating to children should be made by a parent, guardian or responsible adult.
We do not intentionally request children to submit personal information directly through this website.
Please avoid providing unnecessary personal information about children when making an enquiry.
18
Changes to this Privacy Policy
We may update this Privacy Policy when our services, website functionality or legal obligations change.
The latest version will always be published on this website together with its date of revision.