Privacy policy
Last updated: 29 October 2026
This policy explains what personal data I collect through guimendes.com and when you work with me, why, and what rights you have under the EU General Data Protection Regulation (GDPR) and Portuguese law.
Who is responsible
The data controller is Guilherme Mendes, trading as “Gui Mendes”, video editor based in Lisbon, Portugal. Email: [email protected].
What I collect and why
| Data | Why | Legal basis |
|---|---|---|
| Your name, email address and anything you write when you email me | To reply, send a quote and do the work you ask for | Steps before a contract and performing the contract (Art. 6(1)(b) GDPR); for general questions, my legitimate interest in answering (Art. 6(1)(f)) |
| Footage, files and links you send me (for example via Google Drive, Dropbox, WeTransfer or SwissTransfer) | To edit and deliver your video | Performing the contract (Art. 6(1)(b)) |
| Invoicing details, if we work together (name, tax number, address) | Billing and legal accounting duties | Legal obligation (Art. 6(1)(c)) |
| Technical data when you visit the site (IP address, browser, pages requested) | To deliver the website securely and protect it from abuse | Legitimate interest in running a secure website (Art. 6(1)(f)) |
| Anonymous, aggregated visit statistics (pages viewed, country, referrer, device type) | To understand which pages are visited | Legitimate interest (Art. 6(1)(f)) |
| Data processed by YouTube when you choose to play a video on this site | To show you the video | Your consent (Art. 6(1)(a)), given by clicking “Play video” |
There are no contact forms, accounts, newsletters, advertising or tracking cookies on this site. I don’t sell your data or use it for marketing.
People who appear in your footage
Footage you send may show other people. You are responsible for having their permission to film and use it. I only use that footage to do the work you asked for. If you need a data processing agreement for this, ask me and I’ll provide one.
Who else processes the data
- Cloudflare, Inc. hosts the website (Cloudflare Pages), provides privacy-focused visit statistics (Cloudflare Web Analytics, which according to Cloudflare uses no cookies and does not track individuals), and forwards emails sent to [email protected] (Cloudflare Email Routing).
- Microsoft provides the mailbox (Outlook) where my email is received.
- Google (YouTube): some video thumbnails on the homepage are loaded from YouTube’s image servers, which means your browser sends your IP address to Google when the page loads. The YouTube video player itself only loads after you click “Play video”, in YouTube’s privacy-enhanced mode (youtube-nocookie.com). See Google’s privacy policy.
- File transfer services you choose (Google Drive, Dropbox, WeTransfer, SwissTransfer/Infomaniak) process your files under their own privacy policies when you use them to send me footage.
Some of these providers are based in, or may transfer data to, the United States. Those transfers rely on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.
How long I keep it
- Emails and project correspondence: for as long as needed for the project and any follow-up, then deleted, unless I need to keep them longer to meet legal obligations or defend legal claims.
- Footage and project files: deleted within 90 days after final delivery, unless we agree otherwise in writing. Please always keep your own copy of your original footage.
- Invoices and accounting records: for the period required by Portuguese tax and accounting law.
- Website technical data and statistics: kept by Cloudflare according to its own retention periods.
Your rights
You can ask me to access, correct or delete your personal data, restrict or object to its use, or receive it in a portable format. Where I rely on consent, you can withdraw it at any time (for videos, use the reset button on the Cookie policy page). Email [email protected]; I’ll reply within one month.
You also have the right to complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt.
Other things to know
- I don’t make automated decisions or profile you.
- This site isn’t aimed at children.
- Links to other sites (Instagram, SwissTransfer and others) take you to services with their own privacy policies.
- If this policy changes, I’ll update it here and change the date at the top.