Privacy Policy

Data controller

Stucco Vivo is a brand owned by Utopic Mountain, Unipessoal Lda., Portuguese company and tax number 514570202. The company is the controller for the personal data covered by this policy.

Data we receive

For quote, sample or information requests, we collect your name, email address, project location and message. You may also provide a phone number, professional role, finish, type of space, surface, area, substrate, timeframe and photographs. Optional fields may be left blank.

Required details allow us to identify and respond to the enquiry. Without them, the form cannot be submitted; you can contact us directly by email instead.

Please send only information relevant to the project. Avoid unnecessary photographs of people, personal documents or other third-party data.

Accessing the website also involves processing technical data, such as IP address, date and time, requested page and browser information. The form generates a submission reference and uses technical identifiers to prevent duplicates and abuse.

Purposes and legal bases

• Quotes, samples and preparation of services: steps requested before entering into a contract or performance of a contract, under Article 6(1)(b) of the GDPR.
• Other enquiries, including company representatives: our legitimate interest in responding to communications and managing the professional relationship, under Article 6(1)(f).
• Operation and security: our legitimate interest in operating the website, preventing abusive submissions and confirming delivery, under Article 6(1)(f).
• Measuring visits and enquiries: consent to use Google Analytics, under Article 6(1)(a), only after you accept analytics. Declining does not prevent you from using the website or sending enquiries.
• Legal obligations: compliance with applicable obligations where there is a contract or a legally binding request, under Article 6(1)(c).

Submitting the form does not subscribe you to newsletters or authorise marketing campaigns. Photographs received are used to assess the enquiry; publishing them requires separate permission. We do not use these enquiries for solely automated decisions with legal or similarly significant effects.

Who may access the data

Enquiries are forwarded to Stucco Vivo's email address and handled by the Utopic Mountain team responsible for the contact. The service uses hosting, infrastructure, security and email providers: OpenAI's Sites platform, Cloudflare infrastructure and email hosted by Bluehost. If you accept analytics, Google also acts as the provider of Google Analytics.

These services are involved in transmitting, hosting or protecting data. Data may also be disclosed to authorities where legally required.

Technology providers may operate outside the European Economic Area. Such transfers are subject to the conditions of Chapter V of the GDPR, including adequacy decisions or appropriate safeguards such as standard contractual clauses, where applicable. Contact us for information about the recipients, countries and safeguards relevant to your case, or to request a copy of those safeguards.

Data retention

Emails, enquiries and attachments are retained for as long as necessary to respond, follow up the proposal and clarify project-related questions. The retention period depends on the closure of the enquiry, any contractual relationship and the need to meet legal obligations or defend rights. Once those needs end, the data should be deleted.

Technical submission controls store the reference, status, date and identifiers derived from the request and IP address, without storing the enquiry text or photographs in that record. Records older than 24 hours are removed when the next valid request is processed; deletion is not triggered by a 24-hour timer. Email delivered to the inbox is independent of that record.

Cookies and visit measurement

We use Google Analytics 4 to understand page visits and quote and sample requests. The analytics code is loaded only after you select “Accept analytics”. If you decline or have not yet chosen, we do not load Google Analytics.

If you accept, data about pages viewed, interactions, device and browser, visit source and cookie identifiers is processed. Our enquiry events indicate only that a form was started or a submission confirmed, distinguishing quotes from samples. We do not send Google the names, email addresses, phone numbers, messages or photographs entered in the form.

The cookies _ga and _ga_* help distinguish visits and sessions. They are configured to last up to 180 days, without automatic renewal on every visit. Your privacy choice is stored in the browser for up to 180 days, where supported. Report data retention is separate from cookie duration and depends on the Analytics property settings; you can request details through the privacy contact.

You can decline analytics or withdraw consent at any time through “Cookie preferences” in the footer. Withdrawal stops measurement and removes analytics cookies accessible to the website, without affecting processing carried out before that choice.

The website configuration disables Google signals and advertising personalisation. We do not install behavioural advertising tools. Fonts and images are served with the website; infrastructure services may use mechanisms strictly necessary for delivery and security.

Learn more about Google's processing in How Google uses information from sites that use its services.

Your rights

You may request access, rectification, erasure or restriction of your data, object to processing based on legitimate interests, and request portability where applicable. Where processing is based on consent, you can withdraw it without affecting prior processing.

Write to info@stuccovivo.com, explaining your request. Responses are generally free of charge and provided within one month. If complexity justifies a lawful extension, you will be informed within that period. Proportionate information may be requested to confirm your identity.

You may also lodge a complaint with the Portuguese Data Protection Authority — CNPD.

Security and updates

The website uses HTTPS connections. Form submission includes field and attachment validation, request limits and duplicate controls. These measures reduce risk, but no system eliminates all security risks.

Changes to this policy will be identified by the update date. If the purposes or conditions of processing change, the necessary information will be provided before those changes take effect. External websites opened through links have their own policies.