Legal version: MOV-PP-GLOBAL-2026.08.03Effective from: 2026-08-03

DATA PROTECTION

Privacy Policy

This Policy explains what personal data Movozia collects, why it is used, who receives it, how long it is kept and how individuals can exercise their rights.

Last updated: 3 August 2026

Movozia does not sell personal data and does not receive full payment-card details from the checkout provider.

1. Data we collect

The data depends on how a person uses the site or service.

Identity and contact details: name, email, phone, country, company and sector.
Commercial information: request, proposal, plan, approvals, messages and project history.
Project materials: photographs, video, logos, text, files, credentials and metadata.
Payment and billing metadata: status, value, currency, country and legally required details; full card data remains with the processor.
Technical and security data: IP, device, browser, dates, logs, access attempts and session identifiers.
Public professional information used for proportionate B2B prospecting.

2. Purposes and legal bases

We use data to answer requests, prepare proposals, perform contracts, produce and deliver services, manage payments, support clients, protect systems, comply with law and defend rights.

Pre-contract steps and contract performance.
Legal, tax, accounting and fraud-prevention obligations.
Legitimate interests in security, service improvement, complaints and proportionate professional outreach.
Consent for optional marketing or non-essential technologies.

3. Professional outreach

Movozia may contact businesses using public professional data where the service is reasonably relevant. A recipient may object at any time and a minimal suppression record may be kept to honour that choice.

5. International transfers

Providers may process data outside Portugal or the EEA. Where required, Movozia relies on adequacy decisions, standard contractual clauses or other recognised safeguards and limits data to what is necessary.

6. Retention

Data is kept only for as long as needed.

Enquiries without a contract: up to 24 months after the last contact.
Client, contract, payment and invoice data: during the relationship and the applicable legal period, which may reach 10 years.
Production files: normally up to 12 months after delivery.
Security logs: normally up to 12 months, longer where an incident requires it.
Consent, approval and objection records: for as long as needed to prove compliance.

7. Security

Measures include access control, stronger authentication for private areas, encrypted connections, least privilege, private file storage, activity logging and security updates. No system is entirely invulnerable.

8. Individual rights

Where applicable, individuals may request access, correction, deletion, restriction, portability, objection and withdrawal of consent. Requests go to movozia@gmail.com.

Individuals may complain to Portugal's Comissão Nacional de Proteção de Dados or another competent supervisory authority. Brazilian residents may also exercise applicable LGPD rights and contact the ANPD.

9. Automation and children

Movozia does not make solely automated decisions with legal or similarly significant effects. Services are aimed at businesses and adults, not children.

10. Client websites

Where Movozia processes data for a client's website, the client is normally the controller and Movozia the technical processor acting on documented instructions. A data-processing agreement will be used where required.

11. Updates and contact

The date above identifies the current version. Contact: movozia@gmail.com.

DATA PROTECTION — GLOBAL ENGLISH

Privacy rights follow the individual's applicable jurisdiction

Movozia is operated from Portugal and uses service providers in several locations. The privacy law that applies may depend on where the individual lives, where the service is directed and which thresholds or territorial rules are met.

Requests can be sent to movozia@gmail.com. Movozia will verify identity, apply the relevant response period and explain the competent regulator where a regional privacy law applies.

United KingdomConsumer Contracts Regulations, UK GDPR, Data Protection Act and PECR

Where UK data-protection law applies, individuals may exercise rights including information, access, rectification, erasure, restriction, portability, objection and protections relating to automated decisions.
Privacy requests can be sent to movozia@gmail.com and complaints may be made to the Information Commissioner's Office.

Reference authorities: Competition and Markets Authority, local Trading Standards and the Information Commissioner's Office.

European Union and EEAEU consumer law, GDPR and national ePrivacy rules

GDPR rights include access, correction, erasure, restriction, portability, objection and withdrawal of consent where consent is used.
International transfers are handled through an applicable adequacy decision, contractual safeguards or another recognised transfer mechanism.

Reference authorities: The consumer-protection and data-protection authority in the customer's country.

United StatesFederal consumer-protection rules and applicable state consumer and privacy laws

US privacy rights vary by state. Where a state law applies, the customer may have rights to know, access, correct or delete data and to opt out of sale, sharing or targeted advertising.
Movozia does not currently sell personal information or use it for cross-context behavioural advertising. California residents may exercise applicable CCPA or CPRA rights without discriminatory treatment.

Reference authorities: Federal Trade Commission, state attorney general and applicable state privacy regulator.

CanadaProvincial or territorial consumer law and PIPEDA or applicable provincial privacy law

Where PIPEDA applies, an individual can request access to personal information, learn how it was used and disclosed, and challenge its accuracy and completeness.
PIPEDA access requests are generally answered within 30 calendar days, subject to lawful extensions and exceptions. Provincial private-sector laws may apply instead in some provinces.

Reference authorities: The consumer office for the customer's province or territory and the Office of the Privacy Commissioner of Canada or provincial commissioner.

AustraliaAustralian Consumer Law and Privacy Act 1988 where applicable

Where the Australian Privacy Principles apply, individuals may request access to personal information and correction of inaccurate, out-of-date, incomplete, irrelevant or misleading information.
Cross-border handling and complaints will follow the applicable Privacy Act requirements and OAIC guidance.

Reference authorities: Australian Competition and Consumer Commission, state or territory consumer agency and the Office of the Australian Information Commissioner.

New ZealandConsumer Guarantees Act, Fair Trading Act and Privacy Act 2020

Individuals may request access to and correction of their personal information. Access and correction requests are generally answered within 20 working days under the Privacy Act 2020.
If a correction is declined, the individual may request that a statement of correction be attached and may complain to the Privacy Commissioner.

Reference authorities: Consumer Protection, Commerce Commission, Disputes Tribunal and Office of the Privacy Commissioner.

If the customer's country or state is not listed, the proposal will identify the mandatory rules that apply before payment. These regional notices provide a practical summary and do not replace an assessment of a specific dispute or transaction.