Privacy policy
This policy explains what personal data we collect on ferreiraview.com, why, for how long and what your rights are. We keep it simple; if anything is unclear, get in touch.
Last updated: 8 October 2026
1. Who is responsible
Rui Pedro Arantes Ferreira, trading as Ferreiraview
Portuguese tax number (NIF) 222747102 · Ericeira, Portugal
Email: rui@ferreiraview.com · WhatsApp +351 930 537 789
Use either contact for any request about your data.
2. What data we process and why
a) Email sign-up (quiz and gallery alerts)
Data: email, name (optional), your quiz answers (spot, when you surf, what you're interested in), language, the page where you signed up, date and the consent text you accepted.
Purpose: letting you know about new galleries, sending the surf report, sending your discount code and Ferreiraview news (private sessions, prints).
Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with the “Unsubscribe” link in every email or by asking us. Withdrawing doesn't affect anything done before.
b) Enquiries by WhatsApp, email or booking form
Data: what you send us (name, contact, dates, spot, level, photos you want to buy).
Purpose: replying, preparing quotes and booking sessions.
Legal basis: pre-contractual steps and performance of a contract (Art. 6(1)(b)).
c) Buying photos and galleries
Galleries and payments run on the wfolio platform (memories.seakrew.com). The data you enter there (name, email, order details) is used to complete your order and deliver the photos. Invoicing data is kept for the period required by Portuguese tax law.
Legal basis: performance of a contract (b) and legal obligations (c).
d) Photos taken at the beach
We photograph surfing and bodyboarding on public beaches. Photos may show people in the water and are published in galleries for sale, which stay online for 30 days and are then archived (they can be reactivated on request). Portfolio photos on the site are chosen without identifiable client faces.
Legal basis: legitimate interest in carrying out sports photography (f).
If you're in a photo and don't want it online, tell us (date, spot and, if possible, the photo number) and we'll remove it from the gallery. You can object at any time.
e) Browsing the site
Our hosting provider logs technical data (IP address, browser, pages requested) for security and operation. We don't use advertising or analytics cookies. See the cookie policy.
Legal basis: legitimate interest in keeping the site secure and working (f).
3. Who else can access the data
We never sell or rent data. We use these service providers, who only process data on our behalf:
- Supabase: sign-up database, hosted in the European Union (Ireland).
- Resend: email delivery (USA).
- Vercel: website hosting (USA, with servers in several regions).
- wfolio: photo galleries and payments. Please also check the platform's privacy policy when you buy.
- WhatsApp (Meta): only if you contact us there.
- Open-Meteo: weather data used in the surf report. Your browser connects directly to this service, which receives your IP address.
Where data is transferred outside the European Economic Area, this is done with the safeguards set out in the GDPR (for example, the European Commission's standard contractual clauses or the EU-US Data Privacy Framework).
4. How long we keep data
- Email sign-up: until you unsubscribe; after that, we delete your data within 30 days. Sign-ups older than 24 months are deleted automatically (you can sign up again any time).
- Conversations and requests: as long as needed to reply and for the business relationship.
- Invoicing: for the period required by tax law.
- Galleries: 30 days online, then archived so they can be reactivated on request. We remove photos on request at any time.
5. Your rights
You can ask for access, rectification, erasure, restriction, data portability, object to processing and withdraw consent. We reply within one month. Write to rui@ferreiraview.com or use WhatsApp +351 930 537 789.
If you think your data hasn't been handled properly, you can complain to the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt, or to the authority in your country.
6. Children
Email sign-up is for people aged 13 and over. Below that age, sign-up must be done or authorised by a parent or guardian. Parents who want photos of their children removed from a gallery can ask us directly.
7. Security
We use encrypted connections (HTTPS), restricted database access and only the providers we need. The site's form can only add data; it cannot read the subscriber list.
8. Changes
If we change this policy, we update the date above. Significant changes are emailed to subscribers.