Privacy Policy
LemonPixel Digital is a trading name of Velvetnode LDA, a company registered in Portugal. We are a digital agency providing SEO, AI search optimisation, website design and build, content marketing, and digital PR services to businesses.
As the data controller, we determine the purposes and means of processing your personal data. If you have any questions about how we handle your data, please contact us at the details above.
Depending on how you interact with us, we may collect the following categories of personal data:
Identity & Contact Data
Full name, job title, company name, email address, phone number, and postal address. Collected when you contact us, submit an enquiry form, or become a client.
Usage & Technical Data
IP address, browser type and version, device type, operating system, pages visited, time spent on pages, referral source, and other diagnostic data. Collected automatically when you visit our website.
Communications Data
Any information you share with us through email, contact forms, social media messages, or enquiries — including the content of those messages.
Marketing & Preference Data
Your preferences regarding receiving marketing communications from us, and your communication preferences.
Client & Project Data
Information relevant to the delivery of our services, such as website access credentials (where provided), business information, analytics data, and project briefs. This is shared with us directly by clients for the purpose of delivering agreed services.
We do not knowingly collect or process special categories of personal data (such as health information, racial or ethnic origin, political opinions, or biometric data) unless explicitly required and agreed upon in writing for a specific client engagement.
We collect personal data through the following means:
- Directly from you — when you complete a contact or enquiry form on our website, email us, request a consultation, or become a client.
- Automatically — when you browse our website, we collect technical and usage data via cookies and analytics tools (see section 11).
- From third parties — we may receive data from platforms such as LinkedIn, Google, or other referral sources where you have interacted with our content or advertising.
- From clients directly — when onboarding a new client, you may share business and project information with us necessary to deliver our services.
We use the personal data we collect for the following purposes:
To respond to enquiries
When you contact us via our website or email, we use your contact details to respond to your message and follow up as needed.
To deliver our services
When you become a client, we use your data to fulfil the agreed services, communicate about your project, and manage our working relationship.
To improve our website
We use anonymised technical and usage data to understand how visitors use our website and to make improvements to content, performance, and user experience.
To send marketing communications
With your consent, we may send you information about our services, insights, and news. You can opt out at any time by clicking "unsubscribe" in any email or contacting us directly.
To comply with legal obligations
We may process your data where necessary to comply with applicable laws, regulations, or legal proceedings, including tax and accounting obligations.
To protect our legitimate interests
We may use your data to prevent fraud, ensure the security of our systems, enforce our terms and conditions, and manage disputes.
Under the GDPR, we must have a valid legal basis for processing your personal data. We rely on the following bases:
- Consent (Art. 6(1)(a)) — for marketing communications and non-essential cookies. You may withdraw consent at any time.
- Contract (Art. 6(1)(b)) — where processing is necessary to deliver services you have engaged us for, or to take steps prior to entering into a contract with you.
- Legal obligation (Art. 6(1)(c)) — where we are required to process data to comply with a legal requirement, such as financial record-keeping.
- Legitimate interests (Art. 6(1)(f)) — where we have a genuine and proportionate business reason, such as improving our services, preventing fraud, or responding to enquiries — provided this does not override your rights and freedoms.
We do not sell your personal data. We may share it in the following limited circumstances:
- Service providers — trusted third-party tools and platforms we use to operate our business, such as Google Analytics, email platforms, project management tools, and hosting providers. All are bound by data processing agreements.
- Professional advisors — accountants, lawyers, or consultants where necessary for our legal or financial obligations, under strict confidentiality.
- Legal requirements — if required by law, court order, or government authority, we may disclose your data to the relevant party.
- Business transfers — in the event of a merger, acquisition, or sale of our business, your data may be transferred as part of that transaction. We will notify you in advance.
All third parties we work with are required to handle your data securely and in accordance with applicable data protection law.
Some of the third-party tools we use (such as Google Analytics) may transfer and process data outside of the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Transfers to countries recognised as providing an adequate level of data protection
- Other legally approved transfer mechanisms under GDPR Chapter V
You can request further information about the safeguards in place for any specific transfer by contacting us at privacy@lemonpixeldigital.com.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements.
Enquiry & contact data
Retained for up to 24 months from your last interaction with us, unless you become a client.
Client data
Retained for the duration of the client relationship and up to 7 years thereafter to meet legal and tax obligations under Portuguese and EU law.
Marketing data
Retained until you withdraw consent or opt out of communications. We will suppress (not delete) your email to ensure we do not contact you again in error.
Website analytics data
Anonymised usage data is retained in line with Google Analytics default retention settings (up to 14 months). No personally identifiable information is retained beyond this period.
When data is no longer needed, we securely delete or anonymise it.
We take the security of your personal data seriously. We have implemented appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration. These include:
- Secure HTTPS encryption across our website
- Access controls limiting who within our team can access personal data
- Use of reputable, security-certified third-party platforms
- Regular review of our data handling practices
While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. If you believe your data has been compromised, please contact us immediately at privacy@lemonpixeldigital.com.
Under the GDPR, you have the following rights regarding your personal data. To exercise any of these rights, contact us at privacy@lemonpixeldigital.com. We will respond within 30 days.
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — request correction of inaccurate or incomplete data.
- Right to erasure — request deletion of your data where there is no compelling reason for us to continue processing it ("right to be forgotten").
- Right to restrict processing — request that we limit how we use your data in certain circumstances.
- Right to data portability — request a copy of your data in a structured, machine-readable format to transfer to another service.
- Right to object — object to processing based on legitimate interests or for direct marketing purposes.
- Rights related to automated decision-making — we do not use automated decision-making or profiling that produces legal or significant effects on individuals.
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
Our website uses cookies and similar tracking technologies to enhance your experience and gather analytics data. Cookies are small files placed on your device when you visit our website.
We use the following types of cookies:
- Functional cookies — essential for the website to operate correctly. These cannot be disabled.
- Analytics cookies — help us understand how visitors use our site (e.g. Google Analytics). These require your consent.
- Marketing cookies — used to deliver relevant advertising and track campaign performance. These require your consent.
You can manage your cookie preferences at any time via our cookie consent tool or by adjusting your browser settings. For full details of the cookies we use, please see our Cookie Policy.
Our website may contain links to third-party websites, plugins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices.
We encourage you to read the privacy policy of every website you visit when you leave ours.
Our website and services are directed at business professionals and are not intended for children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will update the "last updated" date at the top of this page.
We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.
For any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please get in touch:
We aim to respond to all data-related requests within 30 days in accordance with GDPR Article 12.