Privacy Policy
Last updated: 8 September 2026
1. Who we are
This website, rendergram.com, is operated by Alexandra Sinitaru, trading as Rendergram Studio, a self-employed professional established in Portugal.
For the purposes of the General Data Protection Regulation (GDPR), Alexandra Sinitaru is the controller of the personal data described in this Privacy Policy.
For questions about this Privacy Policy or the way your personal data is processed, you can contact us at:
Email: [email protected]
2. Personal data we collect
The personal data we collect depends on how you interact with Rendergram Studio.
Information you provide to us
When you contact us through the website, by email, or through another communication channel, we may collect information such as:
- your name;
- email address;
- telephone number, where provided;
- company or organisation;
- project details;
- files, plans, references or other materials you provide;
- the contents of your messages and correspondence.
If you become a client, we may also process information required to prepare quotations, agreements, invoices, payments and other project documentation.
Client portal
If you have access to our client portal, we may process information including:
- your name and email address;
- account and authentication information;
- profile information you choose to provide;
- projects associated with your account;
- project images, files and deliverables;
- comments, feedback and project communications;
- project status and related information.
The client portal is used to manage projects and may also allow clients to access previously completed projects and delivered material.
Technical and security information
When you use our website, our website infrastructure and security systems may automatically process technical information such as:
- IP address;
- browser and device information;
- date and time of access;
- pages or resources requested;
- technical, security and error logs.
This information may be necessary for the operation, security and maintenance of the website.
3. How we use your personal data
We process personal data for the following purposes.
Enquiries and prospective projects
We use information you provide to respond to enquiries, discuss potential projects and prepare quotations or proposals.
Depending on the nature of the enquiry, the legal basis for this processing is taking steps at your request before entering into a contract and/or our legitimate interest in responding to business enquiries.
Providing our services
When you become a client, we process personal data as necessary to manage and deliver your project, communicate with you, provide files and fulfil our contractual obligations.
The legal basis is the performance of a contract.
Client portal and project archive
We process account and project information to provide access to the client portal, manage current projects and allow clients to access previously delivered project material.
The legal basis is the performance of our contract and, where applicable, our legitimate interest in maintaining an accessible project history and providing continuity to returning clients.
Accounting and legal obligations
We process and retain information necessary for invoicing, accounting, taxation and compliance with applicable legal obligations.
The legal basis is compliance with our legal obligations.
Website security and administration
Technical information and logs may be processed to protect the website, prevent abuse, investigate technical problems and maintain the security and reliability of our systems.
The legal basis is our legitimate interest in operating and protecting our website and services.
4. Google Analytics
With your consent, we use Google Analytics 4, provided by Google, to understand how visitors use our website.
Google Analytics may process information about your interaction with the website, including pages visited, session activity, approximate location, browser and device information.
Google Analytics is classified as an Analytics service on our website and is only activated after you consent to Analytics cookies through our cookie settings.
If you reject Analytics cookies, Google Analytics is not activated through our website.
The legal basis for this processing is your consent.
Our current Google Analytics data-retention settings are:
- Event data: 2 months
- User data: 14 months
The user-data retention period is configured to reset when new user activity occurs. These settings relate to user- and event-level data and do not necessarily affect aggregated standard Analytics reports.
You can withdraw your consent at any time through the Cookie Settings available on the website.
5. Meta Pixel
With your consent, we use the Meta Pixel, provided by Meta Platforms, to measure website visits and interactions and to understand the effectiveness of advertising on Meta platforms.
The Meta Pixel is classified as a Marketing service on our website and is only activated after you consent to Marketing cookies.
If you reject Marketing cookies, the Meta Pixel is not activated through our website.
The legal basis for this processing is your consent.
You can withdraw your consent at any time through the Cookie Settings available on the website.
6. Google Search Console
We use Google Search Console to monitor how our website appears and performs in Google Search and to identify technical or indexing issues.
Google Search Console is not used by us to place Analytics or Marketing cookies on visitors through this website.
7. Cookies
Our website uses cookies and similar technologies.
Cookies that are strictly necessary for the operation of the website or for remembering your cookie choices may be used without your consent where permitted by law.
Analytics and Marketing cookies are only activated after you provide the relevant consent through our cookie banner.
You can accept, reject or manage optional cookies and can change your preferences at any time through Cookie Settings.
For more detailed information about the cookies and tracking technologies used on this website, please see our Cookie Policy.
8. Who we share personal data with
We do not sell your personal data.
Where necessary, personal data may be processed by third-party service providers that help us operate our website and business, including:
- website hosting and technical infrastructure providers;
- database, file-storage and client-portal service providers;
- email and communication providers;
- website security and backup providers;
- Google, where you consent to Google Analytics;
- Meta Platforms, where you consent to the Meta Pixel;
- accounting and professional service providers;
- public authorities where disclosure is required by law.
These providers may act as processors on our behalf or, depending on the service, as independent data controllers.
9. International data transfers
Some of the service providers we use, including Google and Meta, operate internationally and may process personal data outside Portugal or the European Economic Area.
Where personal data is transferred internationally, applicable safeguards are used in accordance with data-protection law, which may include adequacy decisions, standard contractual clauses or other legally recognised transfer mechanisms.
10. How long we keep personal data
We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required by law.
Enquiries and correspondence
Information relating to enquiries that do not result in a project may be retained for a reasonable period where necessary for follow-up, business records or future communication.
Client projects
Project records, correspondence and associated documentation are generally retained for at least three years after completion of the project and may be retained for longer where reasonably necessary for repeat work, project history, contractual matters or the establishment, exercise or defence of legal claims.
Client portal and project files
Client accounts, delivered images and project material may be retained for an extended period so that clients can continue to access historical projects and previously delivered files.
We aim to provide this archival access for as long as reasonably practicable, but permanent storage is not guaranteed.
You may request deletion of your account and associated personal data, subject to information that we are required to retain for legal, contractual or legitimate business purposes.
Accounting and tax documents
Invoices, accounting records and supporting documents are retained for the period required by Portuguese law.
Article 52 of the Portuguese VAT Code currently requires relevant records and supporting documents to be kept for 10 civil years following the relevant period.
Google Analytics
As described above, our current Google Analytics settings retain event data for 2 months and user data for 14 months, with user retention resetting upon new activity.
Technical and security information
Technical and security logs are retained only for as long as reasonably necessary for website administration, security and the investigation of technical or security incidents.
11. Your data-protection rights
Under the GDPR, depending on the circumstances, you may have the right to:
- request access to the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive certain personal data in a portable format;
- withdraw consent at any time where processing is based on consent;
- lodge a complaint with a supervisory authority.
Consent must be capable of being withdrawn as easily as it was given.
To exercise your rights, contact:
We may request information necessary to verify your identity before fulfilling certain requests.
12. Complaints
If you believe that your personal data has been processed in violation of applicable data-protection law, you have the right to lodge a complaint with a supervisory authority.
In Portugal, the supervisory authority is:
Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º
1200-651 Lisboa
Portugal
You may also contact us first at [email protected], and we will try to address your concern.
13. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.
However, no method of transmission or electronic storage can be guaranteed to be completely secure.
14. Automated decision-making
We do not use personal data collected through this website for solely automated decision-making that produces legal effects or similarly significant effects on individuals.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, services, technologies or legal obligations.
Any revised version will be published on this page and the Last updated date will be changed accordingly.
