Privacy Policy

Last updated: 14 August 2026

This Privacy Policy explains how Daria Drehval, operating under the name "Chicky & Co," a self-employed sole trader (trabalhador independente, "recibos verdes") registered in Portugal (NIF: 327850701), ("I," "me," "my") collects, uses, and protects information when you visit this website or contact me through it.

I am the "data controller" of the personal data described below for the purposes of the EU General Data Protection Regulation (GDPR). Operating as a sole trader rather than a registered company does not exempt me from GDPR — it applies to any individual or organization processing personal data in the course of professional or commercial activity.

1. What Information I Collect

I only collect personal data that you provide directly, through the contact form on this site:

  • Name
  • Email address
  • Phone number (optional)
  • Company name (optional)
  • The message you write

I do not use cookies, analytics tools, or any other tracking technology on this website. I do not collect any data automatically through your browser beyond what your browser or hosting provider logs by default for basic server operation (see Section 6).

2. How I Use Your Information

I use the information you submit through the contact form solely to:

  • Respond to your inquiry
  • Discuss a potential project or collaboration with you

I do not use your information for marketing, advertising, or any purpose beyond replying to the message you sent, unless you separately and explicitly agree to something else (for example, being added to a mailing list — which I do not currently offer).

3. Legal Basis for Processing (GDPR)

I process your data based on:

  • Consent — by submitting the contact form, you consent to your information being used to respond to you.
  • Legitimate interest — responding to business inquiries sent to me is a legitimate interest necessary to operate my business.

4. Where Your Data Goes

When you submit the contact form, your information is sent directly to my email inbox. I do not store submissions in a database, CRM, spreadsheet, or mailing list. I do not sell, rent, or share your information with any third party.

My email is handled by hostinger.com, which may process and store your message as part of standard email delivery and storage. This is a necessary part of receiving your message and is covered by that provider's own data processing terms.

5. How Long I Keep Your Data

I keep messages sent through the contact form only for as long as reasonably necessary to respond to your inquiry and maintain a record of business correspondence — typically no longer than 24 months, unless a longer period is needed for an ongoing project, legal/tax obligation, or dispute. You can request earlier deletion at any time (see Section 8).

6. Server Logs

Like virtually all websites, my hosting provider may automatically log basic technical information (such as IP address, browser type, and access times) for security and server administration purposes. I do not access or use these logs to identify individual visitors, and I do not combine them with contact form data.

7. International Data Transfers

If my hosting or email provider stores or processes data outside the European Economic Area (EEA), that transfer is carried out under that provider's applicable safeguards (such as Standard Contractual Clauses). If you are contacting me from the United States or elsewhere outside the EEA, your information may be processed in the EEA or in your own country as part of normal email delivery.

8. Your Rights (GDPR)

If you are located in the EEA, UK, or otherwise protected by GDPR, you have the right to:

  • Access the personal data I hold about you
  • Correct inaccurate data
  • Delete your data ("right to be forgotten")
  • Restrict or object to my processing of your data
  • Request a copy of your data in a portable format

To exercise any of these rights, contact me at contact@chickyandco.com. I will respond within one month, as required by GDPR.

You also have the right to lodge a complaint with the Portuguese data protection authority — Comissão Nacional de Proteção de Dados (CNPD) — or your own country's supervisory authority, if you believe your data hasn't been handled properly.

9. Visitors From the United States

I do not sell personal information, and as an individual sole trader I do not meet the thresholds that trigger obligations under state privacy laws such as the California Consumer Privacy Act (CCPA). Regardless, I apply the same data-handling practices described in this policy to all visitors, wherever you're located.

10. Children's Privacy

This website and my services are intended for businesses and individuals aged 18 and older. I do not knowingly collect personal data from children.

11. Security

I take reasonable measures to protect the information sent to me, including relying on reputable, secure email providers. However, no method of transmission over the internet is 100% secure, and I cannot guarantee absolute security.

12. Changes to This Policy

I may update this Privacy Policy from time to time, for example if I add new tools (like analytics or a mailing list) to the site. The "Last updated" date at the top will reflect the most recent revision. I encourage you to review this page periodically.

13. Contact

If you have any questions about this Privacy Policy or how I handle your data, contact me at:

Daria Drehval
Operating as "Chicky & Co" — sole trader (recibos verdes), Portugal
NIF: 327850701
RUA DR LUIS CARRIÇO NÚMERO 5 3DRT, 3080-189 FIGUEIRA DA FOZ, PORTUGAL
contact@chickyandco.com