Privacy Policy

Follow the Frequencies
Last updated: July 2025

Follow the Frequencies ("FtF", "we", "us" or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your information when you visit followthefrequencies.com, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and applicable Portuguese data protection law.

By using our website, you acknowledge the practices described in this policy. If you do not agree, please do not use our digital services.

1. Data Controller

The entity responsible for processing your personal data is:

Follow the Frequencies
NAME
Lisbon, Portugal
marta@followthefrequencies.com
followthefrequencies.com

2. Personal Data We Collect

2.1 Data you provide directly

  • Name and email address — when you fill in our contact form or subscribe to our newsletter

  • Message content — submitted through our contact form

  • Billing and delivery details — when you place an order in our shop (name, address, country, email)

  • Payment data — processed directly by Stripe or PayPal; FtF does not store credit card details

2.2 Data collected automatically

  • IP address and browsing data — pages visited, time spent, device and browser used

  • Cookies and similar technologies — as described in Section 7 below

  • Website performance data — through analytics tools such as Google Analytics (if active)

2.3 Data we do not collect
We do not collect sensitive data such as racial or ethnic origin, religious beliefs, health data or biometric data. We do not knowingly collect data from individuals under the age of 16.

3. Purposes and Legal Basis for Processing

Responding to contact and information requests: Legitimate interest (Art. 6(1)(f))

Sending newsletters and marketing communications: Consent (Art. 6(1)(a))

Processing orders and payments: Performance of a contract (Art. 6(1)(b))

Compliance with legal and tax obligations: Legal obligation (Art. 6(1)(c))

Website analytics and improvement: Legitimate interest (Art. 6(1)(f))

Managing non-essential cookies: Consent (Art. 6(1)(a))

4. Sharing Your Data with Third Parties

FtF does not sell, rent or transfer your personal data to third parties for commercial purposes. Data may be shared only in the following circumstances:

4.1 Service providers

  • Squarespace, Inc. — website hosting and management platform (servers in the USA; transfers covered by Standard Contractual Clauses approved by the European Commission)

  • Stripe, Inc. — payment processing (PCI-DSS Level 1 certified)

  • PayPal Holdings, Inc. — alternative payment processing

  • Mailchimp (Intuit Inc.) — newsletter delivery and email list management

  • Google LLC — website traffic analytics via Google Analytics (if active; data anonymised)

4.2 Legal authorities
We may disclose personal data when required by law, court order or a competent regulatory authority, including the Portuguese Data Protection Authority (CNPD).

4.3 International transfers
Some of our service providers are located outside the European Economic Area (EEA), including in the United States. These transfers are carried out under appropriate legal mechanisms, including Standard Contractual Clauses adopted by the European Commission, ensuring a level of protection equivalent to that required under the GDPR.

5. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law:

  • Contact form data — 12 months after the last interaction

  • Newsletter data — until you unsubscribe

  • Order and billing data — 10 years (legal and accounting obligation under Portuguese law)

  • Browsing data and analytics cookies — maximum 26 months

  • Consent records — 3 years from the date consent was recorded

After the applicable retention period, data is securely deleted or irreversibly anonymised.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access — you may request a copy of the personal data we hold about you

  • Right to rectification — you may request correction of inaccurate or incomplete data

  • Right to erasure ("right to be forgotten") — you may request deletion of your data, subject to any legal retention obligations

  • Right to restriction of processing — you may request that we restrict processing of your data in certain circumstances

  • Right to data portability — you may receive your data in a structured, machine-readable format

  • Right to object — you may object to processing based on legitimate interest or for direct marketing purposes

  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at marta@followthefrequencies.com. We will respond within 30 days of receiving your request. If you are not satisfied with our response, you have the right to lodge a complaint with the competent supervisory authority:

Comissão Nacional de Protecção de Dados (CNPD)
Rua de São Bento, 148-3.º · 1200-821 Lisbon, Portugal
geral@cnpd.pt · www.cnpd.pt

7. Cookies

Our website uses cookies and similar technologies. Cookies are small text files stored on your device that help us improve your browsing experience and analyse website usage.

7.1 Types of cookies we use

  • Strictly necessary cookies — essential for the website to function (session, shopping cart, language preferences). These do not require consent.

  • Analytics cookies — help us understand how visitors use the website (e.g. Google Analytics). These require your consent.

  • Functionality cookies — remember your preferences to improve your experience. These require your consent.

  • Marketing cookies — currently not in use. If activated in the future, prior consent will be requested.

7.2 Managing cookies
When you first visit our website, a cookie banner will allow you to accept or decline non-essential cookies. You can update your preferences at any time via the cookie settings in our website footer, or directly through your browser settings. Please note that disabling certain cookies may affect website functionality.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include:

  • Encrypted communications via HTTPS/TLS across the entire website

  • Restricted access to personal data — only authorised individuals who need access may do so

  • Use of certified and industry-recognised service providers (Squarespace, Stripe, Mailchimp)

  • Periodic review of security practices

No data transmission over the internet is 100% secure. In the event of a security breach likely to affect your rights and freedoms, we will notify the CNPD within 72 hours and, where applicable, notify affected individuals directly.

9. Links to Third-Party Websites

Our website may contain links to external websites (social media platforms, streaming services, partners). FtF is not responsible for the privacy practices of those websites. We recommend reviewing their respective privacy policies before providing any personal data.

10. Children

Our website is not directed at individuals under the age of 16 and we do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor without verified parental consent, we will delete it immediately. If you are under 16, please do not provide us with any personal data without the knowledge and consent of your parent or legal guardian.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, applicable law, or the services we provide. When we make significant changes, we will notify you via a prominent notice on our website or by email (where we have your contact details). The date of the last update is always shown at the top of this document. We recommend checking this policy regularly.

12. Contact

For any questions about this Privacy Policy, to exercise your rights, or to submit a complaint, please contact us:

Follow the Frequencies
NAME
marta@followthefrequencies.com
Lisbon, Portugal

We are committed to responding to all requests within 30 days of receipt.

This Privacy Policy has been drafted in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Law No. 58/2019 of 8 August (the Portuguese GDPR implementation act).