Privacy Policy.

1. Who I am

LM Agency is a Portuguese UGC agency that connects brands with content creators and manages the whole production process, from briefing to delivery.

For questions about privacy and data protection, you can contact me at contacto@laramurta.com.

2. What data I collect

I may collect the following personal data:

When you are a brand and contact me

• Name and company name
• Email and phone number
• Information about your project or request
• Billing details

When you are a creator and apply

• Name
• Email and phone number
• Social media handles and links
• Portfolio content
• Equipment you use
• Billing details

Collected automatically when you visit the site

• IP address and device type
• Browser type and operating system
• Pages visited and time spent
• Data from cookies and similar technologies

3. How I use your data

I use your data to:

• Respond to quote requests and applications
• Select creators suited to each brand and project
• Manage production, communication and content delivery
• Process payments and issue invoices
• Improve the site and understand how it is used
• Comply with legal obligations

4. Legal basis for processing (GDPR)

I process your personal data based on one or more of the following conditions:

• Your consent
• The performance of a contract or pre-contractual steps
• Compliance with legal obligations
• My legitimate interests, such as managing the working relationship and improving my services

You can withdraw your consent at any time, where processing is based on it.

5. Data sharing

I don't sell your personal data. I may share data in these situations:

Between creators and brands

When needed to make a collaboration happen, I may share relevant creator information with the brand, such as name, portfolio and produced content.

With service providers

I may share data with trusted tools that support my operation, such as email, cloud storage, invoicing and traffic analysis services. These providers only access the information needed to provide the service.

Under legal obligation

I may disclose data when required by law or by competent authorities, or to protect my rights.

6. Data security

I adopt reasonable technical and organisational measures to protect your data against unauthorised access, loss or misuse. Even so, no method of transmission over the internet is fully secure, so I cannot guarantee absolute security.

7. Cookies

My site may use cookies and similar technologies to keep the site working, remember preferences and analyse traffic. You can manage cookies in your browser settings. Where required by law, I'll ask for your consent before using non-essential cookies.

8. How long I keep your data

I keep your data only for as long as needed to provide the services, meet contractual and legal obligations (for example, invoicing periods) and resolve any disputes. When it's no longer needed, I delete or anonymise the data.

9. International transfers

Some of the service providers I use may process data outside the European Economic Area. Whenever that happens, I make sure adequate safeguards are in place, in line with applicable data protection law.

10. Your rights

Under the GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Ask for your data to be deleted
• Restrict or object to processing
• Withdraw consent
• Ask for the portability of your data
• Lodge a complaint with the supervisory authority

To exercise your rights, contact me at contacto@laramurta.com. In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD), with which you can lodge a complaint.

11. Links to third-party sites

My site may contain links to other sites or social networks. I'm not responsible for the privacy practices of those sites, so I recommend reading their policies.

12. Minors

My services are intended for people aged 16 or over. Between 16 and 18, I only process data with permission from whoever legally represents the applicant, asked for in the application itself. I don't knowingly collect data from minors. If I become aware that I collected data from a minor without authorisation, I'll delete that information.

13. Changes to this Policy

I may update this Privacy Policy from time to time. Updated versions will be published on this page with a new effective date.

14. Contact