PRIVACY POLICY

Effective date: October 13, 2026

Marea is the trading name of Karina Sofia Reyes Corsino, an independent professional based in Cascais, Portugal. Marea provides social media strategy, management, content production and editing services.

This Privacy Policy explains how we collect, use and protect your information when you visit our website or submit an inquiry. By using this website, you agree to the collection and use of information in accordance with this policy.

For the purposes of the General Data Protection Regulation (EU) 2016/679, Karina Sofia Reyes Corsino is the data controller for personal data collected through this website.

1. Information We Collect

We only collect personal information that you voluntarily provide to us, together with basic technical information collected automatically when you visit the site.

When you submit a contact or inquiry form, this may include:

  • First and last name

  • Email address

  • Phone number, if provided

  • The business or brand you represent, if provided

  • Any information you include in your inquiry message

If you go on to become a client, we also collect:

  • Billing details required to issue invoices, including your name or company name and tax number

  • Access or permissions you grant us to your social media accounts

  • Content, materials and brand information you provide for the work

When you visit the website, our website platform automatically collects basic technical data such as pages visited, approximate location, device type and browser type.

We do not collect sensitive personal data, and we ask that you do not include sensitive personal information in your inquiry message.

2. How We Use Your Information

We use the information you provide to:

  • Respond to inquiries and messages

  • Communicate about services you have expressed interest in

  • Deliver agreed services and manage the client relationship

  • Issue invoices and keep accounting records

  • Understand how visitors use the website

We do not use your data for automated decision-making or profiling. We do not sell, rent or trade your personal information to third parties.

3. Our Legal Basis for Processing

Under GDPR we must tell you what entitles us to process your data. We rely on the following legal bases:

  • To reply to your inquiry and discuss whether we are a good fit, we rely on steps taken at your request before entering into a contract, under Article 6(1)(b).

  • To deliver services, communicate during a project and manage the relationship, we rely on the performance of our contract with you, under Article 6(1)(b).

  • To issue invoices and keep accounting records, we rely on our legal obligations, under Article 6(1)(c).

  • To keep records of past inquiries and projects, and to protect our legal position, we rely on our legitimate interests in running and defending the business, under Article 6(1)(f).

  • For website analytics and any non-essential cookies, we rely on your consent, under Article 6(1)(a).

4. How Your Data Is Stored and Shared

Our website is hosted on Squarespace, which securely stores form submissions and website data on its servers.

Your information may also be accessed through:

  • Our email provider, for communication purposes

  • Secure cloud storage and project tools used for internal business operations

  • Our accountant, for invoicing and tax compliance

These providers process data on our behalf, under contract and only on our instructions. Access to your data is limited to us and to the trusted service providers necessary to operate the website and the business. We may also disclose data where we are legally required to do so.

5. Data Transferred Outside the European Economic Area

Some of our service providers, including our website host, are based in the United States or store data there. Where personal data is transferred outside the European Economic Area, the transfer is made under safeguards recognized by European Union law, such as the European Commission's standard contractual clauses or an adequacy decision covering the recipient.

If you would like more detail about a specific transfer, please write to us and we will tell you.

6. Cookies and Analytics

This website uses cookies, which are small files stored on your device.

Essential cookies keep the site working, remember your preferences and keep your session secure. These cannot be switched off.

Analytics cookies help us understand which pages people visit and how they arrived. These are set by our website platform's built-in analytics and are used only with your consent.

You can accept or decline non-essential cookies through the banner when you first visit, change your choice at any time, and delete or block cookies entirely through your browser settings. Blocking essential cookies may stop parts of the site from working.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations.

  • Inquiries that do not become projects are kept for 12 months from the last contact.

  • Client project files and correspondence are kept for the duration of the engagement, plus 3 years.

  • Invoices and accounting records are kept for the period required by Portuguese tax and accounting law, currently 10 years.

  • Website analytics are retained by our website platform, typically for no more than 24 months.

After these periods the data is deleted or anonymized. If you request deletion of your data, we will comply unless retention is required by law.

8. Your Data Protection Rights

If you are located in the European Union, you have the right to:

  • Request access to the personal data we hold about you

  • Request correction of data that is wrong or incomplete

  • Request deletion of your data, where we have no overriding reason to keep it

  • Request that we restrict how we use your data while a question about it is resolved

  • Object to processing based on our legitimate interests

  • Receive your data in a machine-readable format, or have it sent to another provider, known as data portability

  • Withdraw consent at any time, where consent is the basis we rely on

To exercise any of these rights, please contact us using the details below. We will respond within one month, and there is no charge.

You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt, or with the supervisory authority in your own European Union country.

9. Security

We take reasonable technical and organizational measures to protect your data, including access controls, strong authentication on the accounts where data is held, and limiting access to those who need it. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Children

This website and our services are directed at businesses and professionals. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Third-Party Services

This website may link to third-party platforms or services, including social media. We are not responsible for the privacy practices of those external sites and encourage you to review their privacy policies separately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices. Any updates will be posted on this page with a revised effective date, and material changes will be flagged clearly.

13. Contact Information

If you have any questions about this Privacy Policy or how your data is handled, you can contact us at:

Karina Sofia Reyes Corsino, trading as Marea Cascais, Portugal Email: hello@mareamarketing.com