Privacy Policy

This policy explains what personal data 3D Garden Fairy collects, why, who we share it with, and the choices and rights you have. We keep it in plain English.

1. Who we are

This website (3dgardenfairy.com) is operated by Noemi Lewin, based at Monte Ruivo, Alfambras, 8670-143 Aljezur, Portugal, trading as 3D Garden Fairy.

We are the data controller for the personal data described here. You can reach us at:

• Email: [email protected]
• WhatsApp: +351 913 537 511

2. What data we collect

Data you give us (via the form, WhatsApp or email)

• First and last name
• Email address
• Country and — if you choose — phone number
• Your preferred contact method (Zoom / WhatsApp)
• Anything you send us about your project — messages, sketches, site photos, briefs

Data collected automatically (for advertising measurement)

• IP address (read once from our CDN, used for advertising measurement)
• Analytics and advertising cookies and identifiers (see the cookie table in section 6)
• A visitor ID stored in your browser to match your enquiry to your ad interaction
• Browser/device information (user agent) for ad measurement

Whether these items are used depends on your location and your choice — see section 6. If you decline, none of them are used. Either way, your form enquiry still reaches us (see section 3).

3. Why we use it, and our legal basis

• To respond to your enquiry and provide the service — name, email, phone, project details. Legal basis: steps taken at your request prior to a contract, and performance of a contract. This does not depend on cookie consent, which is why we always receive your enquiry.
• To measure and improve our advertising — analytics and advertising cookies/identifiers, IP. Legal basis: your consent. You can withdraw it at any time (section 6).
• To keep the site secure and log basic activity — e.g. that a WhatsApp button was tapped. Legal basis: our legitimate interest in understanding and protecting the service. Where this involves advertising identifiers, we only use them with your consent.

4. Who we share it with

We do not sell your data. We use a small number of trusted providers who process data on our behalf or as independent controllers:

• Meta Platforms (Facebook/Instagram) — advertising pixel, Conversions API and WhatsApp. Used for advertising, subject to your choice (see section 6).
• Google — Google Analytics 4 (measurement, with consent), Google Fonts (page display), and Google Workspace / Apps Script (storing your enquiry and emailing our team).
• Cloudflare — website hosting, content delivery and approximate location (for showing local currency).
• Vimeo — the video player used when you click to play a video. We load it with tracking disabled (dnt=1), so it does not set advertising cookies.

Some of these providers are based outside the EU/EEA. Where data is transferred internationally, it is protected by appropriate safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses (SCCs).

5. How long we keep it

• Enquiries and leads: up to 24 months from our last contact, then deleted or anonymised.
• Analytics data: up to 14 months.
• Your cookie choice: 12 months, after which we ask you again.

6. Cookies & your choices

If you are in the EU, UK or EEA, we set analytics and advertising cookies only after you click Accept on our banner. If you are elsewhere, they may be set by default, and you can opt out at any time by clicking Decline or using the button at the end of this section. Either way, you can change your choice whenever you like.

Cookie / key	Provider	Purpose	Expiry	Set when
gf_consent	This site	Strictly necessary — remembers your cookie choice	12 months	Always (exempt from consent)
_ga	Google	Analytics — distinguishes visitors	13 months	When enabled
_fbp	Meta	Advertising — links visit to ad	90 days	When enabled
_fbc	Meta	Advertising — stores the ad click ID	90 days	When enabled (ad clicks)
gf_ext_id	This site	Advertising — matches your enquiry to your ad interaction	Persistent (local storage)	When enabled

Change my cookie choices

This clears your saved choice and shows the consent banner again.

7. Your rights

Under the GDPR you have the right to: access your data, correct it, have it erased, restrict or object to its use, receive it in a portable format, and withdraw consent at any time. To exercise any of these, email [email protected].

If you believe we have handled your data improperly, you can complain to your local data protection authority — in Portugal, the CNPD (cnpd.pt), or the authority in your own country.

8. Changes to this policy

We may update this policy from time to time. When we make a material change, we update the date at the top and, where required, ask for your cookie consent again. Please check back occasionally.