← Back to GAVINHO

Privacy Notice

Last updated — April 2026

GAVINHO Arquitetura e Interiores, Lda. ("GAVINHO", "we", "us" or "our"), with registered office at Praça da Alegria, Nº 66-A, 1250-004 Lisboa, Portugal (NIF 513 768 580), values your trust and recognises that privacy is important to you. This Privacy Notice describes how we collect, use, share and protect your Personal Data in connection with our architecture, interior design and construction services, our website at by-gavinho.com, the GAVINHO Client Portal, and our digital communications.

Contents
1. Types of Personal Data We Collect 2. Methods of Collection 3. How We Use Personal Data 4. Sharing and Disclosure 5. Your Rights 6. Data Retention 7. Security 8. International Transfers 9. Cookies 10. Updates to This Notice 11. Contacting Us

1. Types of Personal Data We Collect

"Personal Data" means any information that identifies you as an individual or relates to an identifiable individual. In the context of our architecture, interior design and construction services, we may collect:
  • Identifying and contact information — name, telephone number, email address, postal address, social media identifiers
  • Professional and project information — property details, project brief, design preferences, budget parameters, investment ambitions, lifestyle and family information relevant to the design process
  • Financial information — billing details, bank account information for invoicing, payment records
  • Identification documents — where required for contractual or legal purposes (e.g., passport, citizen card, NIF)
  • Digital information — IP address, browser type, device data, usage data collected through our website, and information gathered through cookies and similar technologies
  • Client Portal data — project activity, design approvals, construction updates, material selections and compliance records accessed through the GAVINHO Client Portal (powered by G.A.R.V.I.S.)
  • Communications — records of correspondence via email, WhatsApp, telephone and in-person meetings, including project diaries and notes taken during design and construction phases
  • Images and media — photographs and video of project sites, construction progress and completed works, which may include images of your property

2. Methods of Collection

We collect Personal Data through the following means:
  • Direct interactions — when you contact us via our website, email, telephone, WhatsApp or in person; when you submit a project enquiry; when you enter into a design or construction contract with us
  • Client Portal (G.A.R.V.I.S.) — through your use of the GAVINHO Client Portal, which records project decisions, approvals, construction milestones and material specifications as part of our proprietary project intelligence system
  • Website and digital services — through your browsing activity on our website, including through cookies, analytics tools and similar technologies
  • Social media — when you interact with us through our social media pages (Instagram, LinkedIn)
  • Third parties — from referrals, real estate agents, project consultants, or other professionals involved in your project
  • Property visits — during site visits, design consultations and construction supervision

3. How We Use Personal Data

PurposeLegal Basis
Processing project enquiries, proposals and contractsContractual obligation, pre-contractual measures
Design development, construction management and project deliveryContractual obligation
Operating the Client Portal and G.A.R.V.I.S. project intelligence system — recording project decisions, traceability and compliance documentationContractual obligation, legitimate interests
Preparation and delivery of the GAVINHO Passport at project handoverContractual obligation
Invoicing, payments and financial administrationContractual obligation, legal compliance
Communicating with you about your project via email, WhatsApp and telephoneContractual obligation, legitimate interests
Sending marketing communications, newsletters and invitations to GAVINHO eventsConsent
Aftercare services following project deliveryLegitimate interests, contractual obligation
Photography and documentation of projects for portfolio, editorial and publication purposesConsent, legitimate interests
Website analytics and improvement of our digital servicesLegitimate interests, consent
Compliance with legal and regulatory obligations, including tax and accounting requirementsLegal compliance
Recruitment and career applicationsPre-contractual measures, consent

4. Sharing and Disclosure

We may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis:
  • GAVINHO Group entities — companies within the GAVINHO group, including GAVINHO Build, for the purposes of integrated project delivery
  • Project partners and subcontractors — architects, engineers, construction teams, artisans and other specialists involved in the delivery of your project
  • Technology service providers — hosting providers, analytics platforms, email service providers and the infrastructure supporting the G.A.R.V.I.S. Client Portal
  • Professional advisors — accountants, lawyers and auditors, where required for business operations or legal compliance
  • Public authorities — tax authorities, regulatory bodies, municipal entities and other public authorities where required by applicable law
  • Suppliers and procurement partners — to the extent necessary for sourcing, ordering and delivery of materials and furnishings specified in your project
We do not sell your Personal Data to third parties. We do not share your Personal Data for third-party marketing purposes without your explicit consent.

5. Your Rights

Under Regulation (EU) 2016/679 (General Data Protection Regulation) and Portuguese Law No. 58/2019, you have the following rights:
  • Right of access — to obtain confirmation of whether we process your Personal Data and to access that data
  • Right to rectification — to request correction of inaccurate or incomplete data
  • Right to erasure — to request deletion of your data where there is no compelling reason for continued processing
  • Right to restriction — to request restriction of processing in certain circumstances
  • Right to data portability — to receive your data in a structured, machine-readable format
  • Right to object — to object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us at hello@gavinhogroup.com. We will respond within one month.

You have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados — CNPD) at www.cnpd.pt.

6. Data Retention

We retain Personal Data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting and reporting requirements. Specific criteria include:
  • The duration of our contractual relationship and provision of services
  • Legal obligations requiring retention of records (e.g., Portuguese tax law requires financial records for a minimum of 10 years)
  • The applicable statute of limitations for potential legal claims
  • The GAVINHO Passport and project archive — maintained as a permanent record of the property, forming part of the architectural and construction record. This data may be retained indefinitely as part of the GAVINHO legacy documentation system

7. Security

We implement appropriate technical and organisational measures to protect your Personal Data against unauthorised access, alteration, disclosure or destruction. These include encrypted communications, access controls, secure hosting infrastructure and regular security reviews.

The G.A.R.V.I.S. Client Portal employs industry-standard security protocols, including role-based access controls ensuring only authorised personnel and the designated client can access project information.

No data transmission or storage system can be guaranteed to be 100% secure. If you believe your interaction with us is no longer secure, please contact us immediately at hello@gavinhogroup.com.

8. International Transfers

As GAVINHO operates projects across multiple geographies, your Personal Data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards in accordance with the GDPR, including:
  • Transfers to countries recognised by the European Commission as providing adequate data protection
  • Standard Contractual Clauses (SCCs) adopted by the European Commission
  • Other legally recognised transfer mechanisms
For more information, please contact us at hello@gavinhogroup.com.

9. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse usage and support our communications. In accordance with Directive 2002/58/EC (ePrivacy Directive) as transposed into Portuguese law by Law No. 41/2004, as amended by Law No. 46/2012, we obtain your consent before placing non-essential cookies on your device.

For detailed information, please refer to our Cookie Policy.

10. Updates to This Notice

We may update this Privacy Notice periodically. The "Last Updated" date at the top indicates when it was last revised. Changes become effective upon publication on our website.

11. Contacting Us

GAVINHO Arquitetura e Interiores, Lda. is the data controller responsible for the Personal Data described in this Privacy Notice.

GAVINHO Arquitetura e Interiores, Lda.
Praça da Alegria, Nº 66-A
1250-004 Lisboa, Portugal
NIF: 513 768 580
hello@gavinhogroup.com
© 2026 GAVINHO Group. All rights reserved.