Last updated: 1 July 2026
This Privacy Policy explains how I collect, use, and protect your personal data when you visit inesstavares.com (the “Site”), download a resource, subscribe to updates, or contact me. It also explains your rights and how to exercise them.
I take your privacy seriously and only collect the data I need to run this website, understand how it’s used, and stay in touch with people who ask to hear from me.
This Privacy Policy should be read alongside my Terms & Conditions.
1. Who is responsible for your data
The person responsible for your personal data (the “data controller”) is:
Ines S. Tavares
Sole trader, based in Portugal
Email: hi@inesstavares.com
If you have any questions about this policy or how your data is handled, you can reach me at the email above.
Full identifying details are set out in my Legal Notice.
2. What personal data I collect
I collect two broad categories of data: information you actively give me and information collected automatically when you use the Site.
a) Information you provide to me
- When you download a resource (such as my CV, one-pager, or other downloadable): your name and email address, and any other details you choose to enter in the form.
- When you subscribe to updates or express interest in working together: your name and email address.
- When you contact me by email or through a form: your name, email address, and the content of your message (which may include any other information you choose to share).
b) Information collected automatically
When you visit the Site, certain information is collected automatically through analytics tools and cookies, including:
- Pages you view and links you click
- Approximate location (city/region level, derived from your IP address)
- Device and browser type, operating system, and screen settings
- How you arrived at the Site (for example, a search engine, referral link, or direct visit)
- Date, time, and duration of your visit
I use Google Analytics 4 (GA4) and Google Search Console for this. These are described in more detail below.
3. Google Analytics 4 and Google Signals
I use Google Analytics 4 (GA4), a web analytics service provided by Google, to understand how visitors use the Site and to help me generate and follow up on leads. GA4 uses cookies and similar technologies to collect the automatic information described in Section 2(b).
GA4 does not log or store your full IP address. Your IP address is used only momentarily to determine your approximate location and is then discarded.
Google Signals. I have enabled Google Signals in my GA4 property. This feature associates the session data collected on the Site with Google account information from visitors who are signed in to Google and have turned on Ads Personalization. When Google Signals is active, I may see aggregated demographic information (such as age range and gender) and interest categories about my audience. This data is aggregated and is not used to identify you individually.
If you are a signed-in Google user, you can view and delete the activity Google associates with your account at any time through Google My Activity. You can also control ad personalization through your Google Ads Settings.
You can opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-out Browser Add-on, and you can manage analytics cookies on this Site through the cookie controls described in Section 6.
4. Google Search Console
I use Google Search Console to monitor how the Site performs in Google Search. This tool provides me with aggregated data such as the search terms that lead people to the Site, impressions, clicks, and average ranking positions. This information is aggregated and does not identify you personally.
5. How I use your personal data, and my legal basis
Under the General Data Protection Regulation (GDPR), I must have a valid legal basis for processing your data. Here is how and why I use it:
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Deliver a resource you requested (e.g. my CV/one-pager) | Name, email | Your consent, and taking steps at your request |
| Send you updates, opportunities, or occasional emails you signed up for | Name, email | Your consent (you can withdraw it at any time) |
| Respond to your messages and enquiries | Name, email, message content | My legitimate interest in replying to you, and/or steps prior to a potential working relationship |
| Understand how the Site is used and improve it (analytics) | Automatic data via GA4, Google Signals, Search Console | Your consent (given through the cookie banner) |
| Comply with legal obligations | As required | Legal obligation |
I do not sell your personal data, and I do not use it for automated decision-making that produces legal or similarly significant effects.
6. Cookies and similar technologies
The Site uses cookies. Cookies are small text files stored on your device that help the Site function and allow me to understand how it’s used.
I use two main categories:
- Strictly necessary cookies — required for the Site to work properly. These do not require your consent.
- Analytics cookies — set by Google Analytics 4 and Google Signals (for example,
_ga,_ga_*) to measure and analyse usage. These are only set after you give consent through the cookie banner.
When you first visit the Site, you’ll be asked to accept or reject non-essential cookies. You can change your consent setting at any time on my Cookie Policy, section 7.1. You can also block or delete cookies through your browser settings, though some parts of the Site may not work as intended if you do.
7. Who I share your data with
I don’t sell or rent your data. I do share it with a small number of trusted service providers (“processors”) who help me run the Site and communicate with you. These include:
- Google (Google Analytics 4, Google Signals, Google Search Console) — website analytics and search performance.
- Kit (email marketing platform) — to store lead/subscriber details and send emails you’ve signed up for.
- Hostinger — to host and serve the Site.
Each of these providers processes data on my behalf under their own terms and data protection obligations. I may also disclose your data if required to do so by law.
8. International data transfers
Some of my service providers (including Google and Kit) are based in, or transfer data to, countries outside the European Economic Area (EEA), including the United States. Where this happens, the transfer is protected by an appropriate safeguard, such as the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses, to ensure your data receives an equivalent level of protection.
9. How long I keep your data
- Analytics data (GA4): Retained for 14 months, after which user-level and event-level data is automatically deleted. Aggregated reports may be kept longer.
- Lead and subscriber data (name, email): Kept until you unsubscribe or ask me to delete it, or until it’s no longer needed for the purpose you provided it.
- Email correspondence: Kept for as long as needed to handle your enquiry and for a reasonable period afterwards, then deleted.
10. Your data protection rights
Under the GDPR, you have the right to:
- Access the personal data I hold about you
- Rectify inaccurate or incomplete data
- Erase your data (“right to be forgotten”)
- Restrict or object to certain processing
- Data portability — receive your data in a usable format
- Withdraw consent at any time (this won’t affect processing done before you withdrew it)
- Unsubscribe from emails at any time using the link in every email
- Lodge a complaint with a supervisory authority
To exercise any of these rights, email me at hi@inesstavares.com. I’ll respond within one month.
If you believe your data has been handled improperly, you can complain to your local data protection authority. My supervisory authority is CNPD (Portugal).
11. How I protect your data
I use reasonable technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access. Access to your data is limited to me and the service providers listed above. However, no method of transmission over the internet is completely secure, so I can’t guarantee absolute security.
12. Children’s privacy
This Site is intended for a professional, adult audience. It is not directed at children under 16, and I don’t knowingly collect data from them. If you believe a child has provided me with personal data, please contact me, and I’ll delete it.
13. Links to other websites
The Site may contain links to external websites (such as LinkedIn or other platforms). I’m not responsible for the privacy practices or content of those sites. I encourage you to read their privacy policies before sharing any information.
14. Changes to this policy
I may update this Privacy Policy from time to time to reflect changes in my practices or legal requirements. Any changes will be posted on this page with a revised “Last updated” date. Significant changes may be communicated by email where appropriate.
15. Contact
For any questions, requests, or concerns about this Privacy Policy or your personal data, contact me at:
Ines S. Tavares
Email: hi@inesstavares.com