How we handle
your data.

We take privacy as seriously as we take performance. This text is short and direct — no lawyer-speak. Questions? Write to hello@oku.pt.

1. Who controls your data

The data controller is ōku, a digital agency based in Viana do Castelo, Portugal.

• Email: hello@oku.pt
• Location: Viana do Castelo, Portugal (remote · no public address)

2. What data we collect

a) Contact form

When you fill in the brief, we collect: name, company, email, phone (optional), project type, estimated budget (optional) and message.

b) Cookies and browser identifiers

• Necessary: your consent choice is stored in localStorage as oku-consent.
• Analytics (opt-in): Google Analytics 4 with Consent Mode v2 and IP anonymisation.

c) Cookieless analytics (Cloudflare)

Cloudflare Web Analytics records aggregated visits without cookies, identifiers or personal data — always on.

3. Why we process it

• Respond to your brief (legal basis: pre-contractual measures, GDPR art. 6(1)(b))
• Send a confirmation email (same basis)
• Understand what works via Google Analytics (legal basis: consent, art. 6(1)(a))
• Prevent spam (legal basis: legitimate interest, art. 6(1)(f))

4. Where the data runs

Hosted on Hetzner Online GmbH servers in Germany, EU. Google Analytics may transfer aggregated data outside the EEA under Standard Contractual Clauses with IP anonymisation.

5. Retention

• Submitted briefs: 24 months after last contact, or immediately on request
• Emails: active relationship + 5 years (legal obligation)
• Consent in localStorage: 12 months
• Google Analytics: 14 months (GA4 minimum)
• Server logs: 30 days

6. Your rights

You may access, rectify, erase, restrict, port, or object to processing of your data at any time. We respond within 30 days. Withdraw consent via "Cookies" in the footer. You have the right to lodge a complaint with the CNPD or your national DPA.

7. Security

Mandatory HTTPS (HSTS active), A+ security headers, access limited to the ōku team.

8. Cookie list

Name	Type	Purpose	Duration
oku-consent	localStorage · necessary	Store consent choice	12 months
_ga	Cookie · analytics · opt-in	Google Analytics identifier	2 years
_ga_*	Cookie · analytics · opt-in	GA4 session state	2 years

9. Terms of use

Site content belongs to ōku. You may share links and cite us with attribution. Services contracted with ōku are governed by a separate signed contract.

10. Changes

We update the date at the top when we change anything substantive. If consent is affected, the banner reappears.