LEGAL

Privacy Policy

Weboost — Digital Marketing Agency is committed to protecting your personal data. This policy describes how we collect, use, store and protect the information you provide when using our website.

Last updated: October 2026

1. Data Controller

The data controller for your personal data is Weboost - Agência de Marketing, Unipessoal Lda, Tax ID (NIF) 515241865, with registered office at Rua da Estrada da Bota, 53, 4620-663 Lousada, Portugal, and offices at R. Dom João I 256, 264, 4450-162 Matosinhos, Portugal. For any privacy-related questions, you can contact us at [email protected].

2. Data Collected

We collect personal data you provide directly, including: name, email address, phone number and company information, when you fill in our contact or quote request forms. We also automatically collect website usage data (pages visited, session time, IP address) through cookies and similar technologies.

3. Purposes of Processing

Your data is used to: respond to your enquiries and quote requests; manage the contractual relationship when you are a Weboost client; send marketing communications (only with your consent); improve our services and website experience; comply with legal obligations.

4. Legal Basis

The processing of your data is based on the following legal grounds: contract performance (when you are a client); consent (for marketing communications and non-essential cookies); legitimate interest (for security and service improvement purposes); compliance with a legal obligation.

5. Client Social Media Management (Facebook and Instagram)

As part of our social media management service, our clients authorise Weboost, through Meta's Facebook Login for Business, to access the Facebook Pages and Instagram professional accounts they choose. With that authorisation, Weboost:

  • lists the Pages and Instagram accounts managed by the person granting access, to select the client's one;
  • schedules and publishes, on the client's behalf, the content the client has approved;
  • reads post and account metrics (reach, impressions, engagement) for the client's performance reports.

Each client's data is used only to provide the service to that client. It is never sold or shared with third parties. Clients can withdraw the authorisation at any time in their Facebook settings (Business Integrations) or by asking us by e-mail, in which case we delete the connection data. More details in the platform Privacy Policy.

6. Data Sharing

We do not sell or share your personal data with third parties for commercial purposes. We may share data with service providers who support the operation of our website and delivery of services (e.g. email marketing platforms, analytics tools). All subcontractors are required to process data in accordance with the GDPR.

7. Data Retention

Your data is retained for as long as strictly necessary for the purposes that motivated its collection, or for the legally required period. Client contact data is kept for the duration of the contractual relationship and for a period of 5 years after its end.

8. Your Rights

Under the GDPR, you have the right to: access your personal data; rectify incorrect data; request erasure of data; object to processing; request restriction of processing; data portability. To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with the relevant data protection authority.

9. Security

We adopt appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or disclosure, in accordance with applicable information security standards.

10. Changes to This Policy

We reserve the right to update this Privacy Policy. Any changes will be published on this page with the updated date. We recommend that you check this page regularly.