Last updated: 4 Sept 2025

Carlos Henrique Alves, trading as Rick Marketing (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information.

1. Information We Collect

1.1 Information You Provide

  • Contact Details: Name and email address through our contact form
  • Messages: Any information you include in contact form messages
  • Business Information: Details about your business shared via email after purchasing our services
  • Communication Records: Email correspondence during service delivery

1.2 Information Collected Automatically

  • Website Analytics: We use Google Analytics to collect information about how you use our website, including pages visited, time spent, and general location data
  • Cookies: Our website uses cookies as detailed in our Cookie Policy

1.3 Payment Information

Payment processing is handled entirely by Stripe. We do not collect, store, or have access to your payment card details.

2. How We Use Your Information

2.1 Legal Basis for Processing

We process your personal data under the following legal bases:

Contract Performance:

  • Delivering website development and marketing services
  • Communicating about your project
  • Providing customer support

Legitimate Interests:

  • Analyzing website performance and user experience
  • Maintaining business records
  • Improving our services

Consent:

  • Sending marketing emails (you can withdraw consent anytime)
  • Using cookies for analytics (managed through our cookie consent tool)

2.2 Purposes of Processing

  • Service Delivery: To provide website development and digital marketing services
  • Communication: To respond to inquiries and provide project updates
  • Marketing: To send promotional emails about our services (only to those who contact us)
  • Analytics: To understand website usage and improve user experience
  • Legal Compliance: To meet accounting, tax, and legal obligations

3. Information Sharing and Transfers

3.1 Third-Party Service Providers

We share your information with the following service providers:

Stripe (Payment Processing):

  • Purpose: Processing payments for our services
  • Data shared: Payment transaction data (we don’t access your payment details)

Google (Analytics & Ads):

  • Purpose: Website analytics and creating advertising campaigns for clients
  • Data shared: Website usage data and client business information for ad creation

ScalaHosting (Website Hosting):

  • Purpose: Hosting our website and client websites
  • Data shared: Website data and communications

Amazon SES (Email Marketing):

  • Purpose: Sending marketing emails
  • Data shared: Email addresses and names of people who contact us
  • Location: Servers located in Stockholm, Sweden

MXroute (Business Email):

  • Purpose: Business email communications
  • Data shared: Email correspondence

3.2 International Transfers

Some of our service providers may transfer your data outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place through:

  • Service providers’ compliance with GDPR
  • Standard contractual clauses approved by the European Commission
  • Adequacy decisions by the European Commission

3.3 No Sale of Data

We never sell, rent, or trade your personal information to third parties.

4. Data Retention

We retain your personal data for the following periods:

  • Contact Form Data: 2 years from submission (if no services purchased)
  • Client Project Data: 7 years after project completion (for accounting and legal purposes)
  • Marketing Email Data: Until you unsubscribe or request deletion
  • Website Analytics: According to Google Analytics default retention settings (26 months)
  • Email Communications: 7 years (for business and legal purposes)

5. Your Rights Under GDPR

You have the following rights regarding your personal data:

5.1 Right of Access

Request a copy of the personal data we hold about you.

5.2 Right to Rectification

Request correction of inaccurate or incomplete personal data.

5.3 Right to Erasure (“Right to be Forgotten”)

Request deletion of your personal data, subject to legal retention requirements.

5.4 Right to Restrict Processing

Request limitation of how we process your personal data.

5.5 Right to Data Portability

Request transfer of your data in a structured, machine-readable format.

5.6 Right to Object

Object to processing based on legitimate interests or for marketing purposes.

5.7 Right to Withdraw Consent

Withdraw consent for marketing communications or cookie usage at any time.

5.8 Exercising Your Rights

To exercise any of these rights, contact us using the contact form on our website. We will respond within one month of receiving your request.

6. Marketing Communications

6.1 Email Marketing

If you contact us through our website, we may send you marketing emails about our services. You can unsubscribe at any time using the link provided in every email.

6.2 Unsubscribing

To stop receiving marketing emails:

  • Click the unsubscribe link in any marketing email
  • Contact us through our website contact form
  • Your request will be processed within 72 hours

7. Cookies and Website Analytics

7.1 Cookie Usage

Our website uses cookies to:

  • Remember your cookie preferences
  • Analyze website traffic and usage
  • Improve website functionality

7.2 Cookie Consent

We use the Complianz plugin to manage cookie consent. You can modify your cookie preferences at any time through the cookie settings on our website.

7.3 Google Analytics

We use Google Analytics to understand how visitors use our website. This service may use cookies and collect information such as:

  • Pages visited and time spent on site
  • General geographic location
  • Device and browser information
  • Referral sources

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

  • Secure hosting with reputable providers
  • Encrypted email communications
  • Regular security updates and monitoring
  • Limited access to personal data on a need-to-know basis

However, no internet transmission is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children’s Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children under 16.

10. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated “Last updated” date. Continued use of our website after changes indicates acceptance of the updated policy.

11. Data Protection Officer

As a small business, we are not required to appoint a Data Protection Officer. For all privacy-related inquiries, contact us directly.

12. Supervisory Authority

You have the right to lodge a complaint with the Irish Data Protection Commission if you believe we have not handled your personal data in accordance with data protection law.

Irish Data Protection Commission
Website: www.dataprotection.ie
Email: [email protected]

13. Contact Information

Data Controller: Carlos Henrique Alves, trading as Rick Marketing
Business Location: Ireland
Contact: Use our website contact form for all privacy-related inquiries

This Privacy Policy is effective as of the date last updated above.