LEGAL

Privacy Policy

Last updated: September 24, 2026

1. Introduction

This Privacy Policy explains how Onlinuum collects, uses, stores, and protects personal data when you visit onlinuum.com, contact us, request a quote, or use our services.

We aim to process personal data transparently and in line with the General Data Protection Regulation (GDPR), applicable Portuguese law, and other relevant privacy rules, including cookie and tracking requirements where they apply.

2. Data Controller

Onlinuum is a brand and website owned and operated by VIVIDIGIT, UNIPESSOAL LDA (Portugal), NIPC: 519516699. VIVIDIGIT, UNIPESSOAL LDA is the data controller responsible for processing personal data in connection with onlinuum.com and Onlinuum services.

If you have questions about this policy or your data, contact us at:

3. What Data We Collect

We may collect the following categories of data:

Data you provide directly

  • Contact and quote request data: name, email address, phone number, business details, message content, selected services, selected scopes, and order notes
  • Client and project data: briefing materials, account access, analytics access, campaign data, reports, and other information you provide for service delivery
  • Commercial and billing data: quote details, invoices, payment status, tax information, and commercial communications
  • Correspondence: emails, messages, call notes, approvals, and project feedback

Data collected automatically

  • Technical and usage data: IP address, browser type, operating system, device information, pages viewed, referral data, and interaction events
  • Consent and preference data: cookie choices, theme preference, and cart state stored in browser storage
  • Analytics data: website usage data collected with Google Analytics, as described in section 7

4. How We Use Personal Data

We use personal data for the following purposes:

  • To respond to inquiries and quote requests
  • To prepare, deliver, and manage services
  • To communicate during onboarding, delivery, revisions, billing, and support
  • To comply with accounting, tax, fraud-prevention, and other legal obligations
  • To maintain site security, diagnose abuse, and protect our systems
  • To measure website usage and improve the site, as described in section 7
  • To send marketing communications only where you have separately consented

Depending on the context, we rely on one or more of the following GDPR legal bases:

  • Contract performance or pre-contractual steps (Art. 6(1)(b) GDPR): for handling quote requests, onboarding, project delivery, and client communications directly related to the requested services
  • Legal obligation (Art. 6(1)(c) GDPR): for tax, accounting, recordkeeping, and compliance duties
  • Legitimate interests (Art. 6(1)(f) GDPR): for website security, fraud prevention, operational communications, defending legal claims, and website analytics for visitors outside the EEA, the UK, and Switzerland, where our interests do not override your rights
  • Consent (Art. 6(1)(a) GDPR): for analytics cookies for visitors in the EEA, the UK, and Switzerland, for marketing technologies, and for any optional marketing communications

For contact forms and service requests, we do not rely on marketing consent to process the information needed to answer your request. That processing is generally necessary to take steps at your request before entering into a contract, or to perform a contract.

6. Recipients and Processors

We do not sell personal data. We may share personal data with service providers and processors that help us operate the website and deliver services, such as:

  • Hosting and infrastructure providers: to host the website and store server logs
  • Web3Forms: to transmit website contact and quote request form submissions to our email workflow
  • Google (Google Tag Manager and Google Analytics 4): to measure website usage as described in section 7
  • Email, collaboration, and productivity tools: where needed for project delivery and communication
  • Professional advisers or authorities: where required for legal, accounting, tax, dispute, or compliance reasons

We require processors acting on our behalf to process data only under appropriate contractual and legal safeguards.

7. Cookies, Local Storage, and Analytics

Our website uses essential browser storage and Google Analytics 4, loaded through Google Tag Manager. We do not currently use advertising or remarketing tags.

Essential storage

We use essential browser storage for functions such as:

  • preserving the order cart state
  • remembering interface preferences such as theme selection
  • supporting core site functionality and security-related behavior

These functions are necessary for the website to work properly and do not depend on your cookie choices.

Analytics

We use Google Analytics 4 to understand how the site is used: which pages people visit, how they arrive, and which buttons and forms they use. How it runs depends on where you are:

  • In the EEA, the UK, and Switzerland, Google Analytics runs in consent mode. Until you accept, it sets no analytics cookies and stores no identifiers on your device. Google receives only cookieless signals, such as a page view without a stored visitor identifier, which it may use for aggregated and modelled reports. Analytics cookies are set only after you press Accept or save your cookie settings with Analytics selected.
  • Elsewhere, Google Analytics runs with cookies from your first visit, and you can switch it off at any time.

For the current visit only (until you close the tab), the site also remembers the page you arrived on and the site that referred you, so that our analytics and any enquiry you send credit the right source. This is not kept if you have switched Analytics off.

Your choices

In the cookie settings, Analytics is pre-selected and Marketing is not. Accept turns both on. Marketing covers campaign and remarketing technologies. We do not use any today; if we add them, they will run only for visitors who have Marketing turned on.

You can change your choice at any time with the Cookies button on the site. If you switch Analytics off, Google Analytics stops on the current page, is not loaded on later pages, and its cookies (_ga, _gid, _gat) are deleted from your browser.

8. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes described above, including:

  • Contact and quote request data: generally up to 24 months after the last meaningful communication, unless a longer retention period is justified by ongoing business discussions or legal reasons
  • Client and project records: for the duration of the engagement and a reasonable period afterward for operational, legal, and evidentiary purposes
  • Accounting and invoice records: for the period required under applicable tax and accounting law
  • Consent records: for as long as needed to demonstrate or manage consent choices
  • Analytics data: according to the data retention settings of our Google Analytics property

9. International Data Transfers

Some service providers may process personal data outside the European Economic Area (EEA). Where this happens, we aim to use appropriate safeguards, such as Standard Contractual Clauses, adequacy decisions, or equivalent legal transfer mechanisms where required. Google may process analytics data in the United States; Google LLC participates in the EU-U.S. Data Privacy Framework.

10. Your Rights

Under the GDPR, you may have the right to:

  • access your personal data
  • correct inaccurate or incomplete data
  • request deletion of data in certain circumstances
  • restrict processing in certain circumstances
  • object to processing based on legitimate interests
  • receive a portable copy of certain data
  • withdraw consent at any time where processing is based on consent

To exercise these rights, contact mail@vividigit.com. We will respond within the period required by applicable law. You also have the right to lodge a complaint with a competent data protection authority.

11. Security

We use reasonable technical and organizational measures to protect personal data, including HTTPS, access restrictions, and process controls designed to reduce the risk of unauthorized access, loss, misuse, or alteration.

12. Children

Our website and services are intended for business and professional use and are not directed to children. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or technical changes. The current version will be published on this page with an updated effective date.

14. Contact

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at: