Privacy Policy

Last update: Oct 15, 2024

Definitions

Privacy Policy

Last Updated: January 31, 2026

1. Introduction

Lobby Mill ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or engage with our services.

We are based in Portugal and operate in accordance with the General Data Protection Regulation (GDPR) and Portuguese data protection laws.

2. Who We Are

Data Controller:
Lobby Mill
Portugal

Contact:
Email: projects@lobby.pt

For questions about this Privacy Policy or your data rights, please contact us using the information above.

3. Definitions

Personal Data (PD): Any information relating to an identified or identifiable natural person, including name, email address, phone number, postal address, company name, IP address, or any other information that can identify you.

Non-Personal Data (NPD): Information that cannot be used to identify you personally, such as aggregated statistics or anonymized data.

Processing: Any operation performed on personal data, including collection, storage, use, sharing, or deletion.

4. Information We Collect

4.1 Information You Provide Directly

When you contact us or request information about our services, we may collect:

Contact Information: Name, email address, phone number, postal address
Company Information: Company name, role/position, business type
Project Information: Project description, location, budget range, timeline, design requirements
Communication Records: Content of your messages, inquiries, and correspondence with us

4.2 Information Collected Automatically

When you visit our website, we automatically collect:

Technical Information: IP address, browser type and version, operating system, device type
Usage Data: Pages visited, time spent on pages, referring website, date and time of visit
Cookies and Similar Technologies: See Section 7 below

4.3 Information We Do NOT Collect

We do not collect:

Payment card information (handled securely by third-party payment processors)
Sensitive personal data such as health information, racial/ethnic origin, religious beliefs, or biometric data
Information about children under 16 years of age

5. How We Use Your Information

5.1 Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contract Performance: To respond to your inquiries, provide quotations, and fulfill contracts for furniture manufacturing projects.

Legitimate Interest: To improve our website, understand customer needs, and develop our services.

Consent: When you subscribe to our newsletter or agree to marketing communications (you can withdraw consent at any time).

Legal Obligation: To comply with accounting, tax, and legal requirements.

5.2 Purposes of Processing

We use your information to:

Respond to project inquiries and provide quotations
Communicate about ongoing projects and installations
Process orders and manage contracts
Provide customer support and aftercare
Improve our website and services
Send marketing communications (with your consent)
Comply with legal and regulatory obligations
Protect our legal rights and prevent fraud

6. How We Share Your Information

We do not sell your personal data. We may share your information with:

6.1 Service Providers

We work with trusted third-party service providers who assist us with:

Website hosting and maintenance
Email communication services
Project management tools
Payment processing
Logistics and delivery services

These providers are contractually obligated to protect your data and use it only for specified purposes.

6.2 Professional Advisors

We may share information with lawyers, accountants, or consultants when necessary for business operations.

6.3 Legal Requirements

We may disclose your information if required by law, court order, or regulatory authority, or to protect our legal rights.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us improve your experience and understand how our website is used.

7.2 Types of Cookies We Use

Essential Cookies: Required for the website to function properly (e.g., remembering your privacy preferences).

Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics).

Functionality Cookies: Remember your preferences and settings.

Marketing Cookies: (Only with your consent) Track your activity to deliver relevant advertising.

7.3 Managing Cookies

You can control and delete cookies through your browser settings. However, disabling essential cookies may affect website functionality.

For more information about cookies, visit: www.allaboutcookies.org

8. Your Data Protection Rights

Under GDPR and Portuguese law, you have the following rights:

8.1 Right of Access

Request a copy of the personal data we hold about you.

8.2 Right to Rectification

Request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data in certain circumstances.

8.4 Right to Restriction of Processing

Request that we limit how we use your personal data.

8.5 Right to Data Portability

Receive your personal data in a structured, commonly used format and transfer it to another controller.

8.6 Right to Object

Object to processing based on legitimate interests or for direct marketing purposes.

8.7 Right to Withdraw Consent

Withdraw consent at any time where processing is based on consent.

8.8 Right to Lodge a Complaint

File a complaint with the Portuguese Data Protection Authority (CNPD): www.cnpd.pt

8.9 How to Exercise Your Rights

To exercise any of these rights, contact us at projects@lobby.pt. We will respond within 30 days (or 60 days for complex requests, with notification).

You may need to provide proof of identity to protect your data security.

9. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this Privacy Policy:

Project Inquiries: 2 years from last contact (unless you become a client)
Client Data: Duration of project + 7 years (for legal/accounting requirements)
Marketing Consent: Until you unsubscribe or withdraw consent
Website Analytics: 26 months (Google Analytics default)

After the retention period expires, we securely delete or anonymize your data.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

Secure server hosting with encryption
Access controls and authentication
Regular security assessments
Employee training on data protection
Secure communication channels

However, no internet transmission is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

11. International Data Transfers

Your data is primarily processed within the European Union. If we transfer data outside the EU/EEA, we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions by the European Commission
Binding Corporate Rules

12. Children's Privacy

Our website and services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

13. Third-Party Websites

Our website may contain links to third-party websites (e.g., social media, material suppliers). We are not responsible for the privacy practices of these websites. Please review their privacy policies before providing any personal data.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will:

Post the updated policy on our website with a revised "Last Updated" date
Notify you by email if we make material changes that affect how we use your personal data
Request your consent if required by law for new processing activities

Your continued use of our website after changes are posted constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions, concerns, or wish to exercise your data protection rights, please contact us:

Lobby Mill
Portugal

Email: projects@lobby.pt

Data Protection Authority:
Comissão Nacional de Proteção de Dados (CNPD)
Website: www.cnpd.pt
Email: geral@cnpd.pt