Mango Finance Studio
Privacy policy
The Studio runs on information clients share in confidence: enquiries, project files, and the numbers behind a business. This page explains what we collect, why, who sees it, how long we keep it, and the rights you have under the General Data Protection Regulation (GDPR).
Last updated: 29 October 2026
Who we are
The data controller for this website and for the Studio's work is Jaime Mangueira, trading as Mango Ventures (Mango Finance Studio), Lisbon, Portugal. For anything privacy related, contact us at contact@mangoventures.eu. We have not appointed a Data Protection Officer, because the law does not require one for a practice of this size; that email address is our privacy contact for every question and request about your information.
What we collect, and why
- Identity and contact details (your name and email address), so we can reply to your enquiry and stay in touch during an engagement.
- Enquiry and project information (what you describe in the enquiry form, and the files, figures and documents you share for the engagement), so we can prepare a proposal and deliver the work.
- Billing details (your name, the tax details you give us for the invoice, and payment references), so we can invoice correctly and keep proper accounts.
The legal bases are: performance of a contract, for delivering the engagement you commission; steps taken at your request before a contract, for replying to your enquiry and preparing your proposal; legal obligations, for invoicing and tax records; and our legitimate interests in running the Studio and keeping proper project records. Where anything optional is involved, we rely on your consent, which you can withdraw at any time by email.
Who receives your information
Three processors run the website and the inbox: Cloudflare hosts this website, Web3Forms delivers the forms on this site to us, and Zoho runs our email. Beyond that, your information goes nowhere unless you ask us to share work with someone, for example your accountant or your own advisor. Your information is never sold, and never used for third party marketing.
International transfers
Some of those processors may process information outside the European Economic Area. Where they do, the transfer is covered by a European Commission adequacy decision or by the Standard Contractual Clauses, the safeguards European law provides for transfers of this kind.
How long we keep it
Enquiries that do not become engagements are deleted within 12 months. Project information is kept while the engagement runs, and afterwards only for as long as follow up questions, legal limitation periods and record keeping duties reasonably require. Invoices and billing records are kept for 10 years, as Portuguese tax and accounting law requires, and are then deleted.
Your rights
Under the GDPR you have the right to access your information, to have it corrected (rectification), to have it erased, to restrict how it is used, to receive it in a portable format (data portability), and to object to processing based on legitimate interests. Where we rely on your consent, you can withdraw it at any time. To use any of these rights, email contact@mangoventures.eu. We reply within one month; for complex requests the law allows up to two further months, and if that happens we will tell you within the first month and explain why.
Complaints
If you think we have handled your information badly, please tell us first so we can put it right. You also have the right to complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, geral@cnpd.pt, www.cnpd.pt, or to the supervisory authority of your own EU country of residence.
Security, and breaches
Client information sits in access controlled accounts, is encrypted in transit, and is seen only by the people working on the engagement. If a personal data breach is likely to put your rights at high risk, we will inform you without undue delay, and where the law requires it we notify the CNPD within 72 hours of becoming aware of the breach.
Cookies and local storage
This site sets no advertising or analytics cookies. It stores one functional preference in your own browser's local storage: your light or dark theme choice, so the site opens the way you left it. You can clear it at any time in your browser settings, and the site then goes back to following your device setting. The site loads its fonts from Google Fonts, which means your browser requests those font files from Google when a page opens.
Automated decision making
None. Every enquiry is read by a person, every proposal is written by a person, and no decision about you is made by a computer alone.
Changes to this policy
If this policy changes, the updated version will be posted on this page with a new date at the top.