Last updated: May 8th 2026
This Privacy Policy explains how Rafael Rocha collects, uses and protects personal data when you visit this website, contact me, submit a form, subscribe to communications or interact with my services.
This website is operated by Rafael Rocha, an SEO, Google Ads and website consultant based in Portugal.
For the purposes of the General Data Protection Regulation (GDPR), Rafael Rocha is the data controller for the personal data processed through this website.
1. Who is responsible for your data?
The data controller is:
Rafael Rocha
SEO, Google Ads and website consultant
Based in Portugal
Email: geral@rafaelrocha.pt
For any questions about this Privacy Policy or how your personal data is processed, you can contact me using the email above.
2. What personal data I collect
I may collect personal data when you interact with this website or contact me directly.
This may include:
Name
Email address
Phone number
Company or agency name
Website URL
Message or project details submitted through contact forms
Newsletter subscription details, if applicable
Technical data such as IP address, browser, device type, pages visited and website interactions
Analytics and cookie-related data, depending on your consent choices
I only collect the data that is necessary for the purposes described in this Privacy Policy.
3. How I collect personal data
Personal data may be collected when you:
Submit a contact form
Request a consultation, SEO review, Google Ads review or website review
Subscribe to a newsletter or email updates
Contact me by email, phone, WhatsApp or social media
Browse the website
Interact with cookies, analytics or tracking tools, where applicable
Why I use your personal data
I may use your personal data for the following purposes:
To respond to enquiries and contact requests
To provide information about my services
To schedule calls or consultations
To review your website, campaigns or marketing needs when requested
To prepare proposals, quotes or service recommendations
To provide contracted services
To send newsletter or marketing communications, where you have subscribed or given consent
To improve the website, content, user experience and marketing performance
To analyse website traffic and understand how visitors use the website
To comply with legal, accounting or tax obligations
To protect the website from misuse, spam or security threats
Legal basis for processing
Under the GDPR, I process personal data based on one or more of the following legal bases:
Consent
When you subscribe to communications, accept optional cookies or voluntarily submit information through a form.
Pre-contractual or contractual necessity
When processing is necessary to respond to your enquiry, prepare a proposal, schedule a consultation or provide requested services.
Legitimate interest
When processing is necessary to improve the website, respond to business enquiries, analyse performance, prevent abuse or manage client relationships, provided that your rights and interests do not override those interests.
Legal obligation
When processing is necessary to comply with tax, accounting, legal or regulatory obligations.
Newsletter and marketing communications
If you subscribe to a newsletter or marketing communications, I may use your email address to send practical insights about SEO, Google Ads, websites, lead generation, AI tools and digital marketing.
You can unsubscribe at any time by clicking the unsubscribe link in the email or by contacting me directly.
If you unsubscribe, I may keep a limited record of your email address to ensure that you are not contacted again for the same purpose.
Cookies and analytics
This website may use cookies and similar technologies to make the website work properly, analyse traffic, improve content and, where applicable, support marketing activities.
Cookies may include:
Essential cookies required for the website to function
Analytics cookies to understand website usage
Marketing or tracking cookies, where applicable and only with consent
Non-essential cookies should only be used where you have provided consent through the cookie banner or preferences tool.
For more details, please see the Cookie Policy.
8. Tools and third-party services
I may use third-party tools to operate the website, manage forms, analyse traffic, send communications or deliver services.
These may include, depending on the setup of this website:
Framer, for website hosting and website functionality
Google Analytics, for website analytics
Google Search Console, for search performance monitoring
Google Tag Manager, if used for tag management
Form or CRM tools used to receive and manage enquiries
Calendly or similar scheduling tools, if used
Google Workspace or similar tools for email and business communication
These providers may process personal data on my behalf and only for the purposes required to provide their services.
9. International data transfers
Some third-party providers may process or store data outside the European Economic Area.
Where this happens, appropriate safeguards should be used, such as adequacy decisions, standard contractual clauses or other lawful transfer mechanisms under the GDPR.
10. How long I keep your data
I keep personal data only for as long as necessary for the purposes for which it was collected.
Typical retention periods may include:
Contact form enquiries: for as long as needed to respond and manage potential business opportunities
Client data: for the duration of the relationship and for the period required by legal, accounting or tax obligations
Newsletter data: until you unsubscribe or request deletion
Analytics data: according to the retention settings of the analytics tools used
Legal and accounting records: for the legally required retention period
When data is no longer needed, it will be deleted, anonymised or securely archived where required by law.
11. How I protect your data
I take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include secure tools, restricted access, strong passwords, encrypted services where available and careful handling of personal data.
However, no website or online transmission is completely secure, so absolute security cannot be guaranteed.
12. Your rights
Under the GDPR, you may have the right to:
Be informed about how your data is used
Access your personal data
Request correction of inaccurate or incomplete data
Request deletion of your personal data
Request restriction of processing
Object to processing
Request data portability
Withdraw consent at any time, where processing is based on consent
Not be subject to a decision based solely on automated processing, where applicable
These rights are also described by the European Data Protection Board and the European Commission as part of individuals’ rights under the GDPR.
To exercise your rights, contact:
I may need to verify your identity before responding to your request.
13. Right to lodge a complaint
You also have the right to lodge a complaint with a data protection supervisory authority.
In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD), which is responsible for supervising compliance with the GDPR and Portuguese data protection law.
You can contact CNPD through its official channels.
14. Links to other websites
This website may contain links to third-party websites, tools or platforms.
I am not responsible for the privacy practices, content or security of external websites. You should read the privacy policies of those websites before providing any personal data.
15. Changes to this Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes in the website, services, tools used or legal requirements.
The updated version will be published on this page with a revised “Last updated” date.
16. Contact
For any questions about this Privacy Policy or how your personal data is processed, you can contact:
Rafael Rocha
Email: geral@rafaelrocha.pt
