Privacy Policy
Last updated: 9 September 2026
This policy explains what personal data Marketing for Artists collects, why, for how long, and what your rights are. It covers this website, our contact form, our work for clients, and the access clients give us to their assets on Meta's platforms: Facebook Pages, Instagram professional accounts, ad accounts and Business Manager.
Who we are
Marketing for Artists is the trading name of Cristiana Pereira Vieira, a sole trader registered in Portugal. We are an independent marketing studio working with artists, art mentors and creative educators.
Cristiana Pereira Vieira, trading as Marketing for Artists
Rua Engenheiro Adelino Amaro da Costa 10, 1.º Frente
Portugal
Tax number (NIF): 217910467
Email: geral@mktforartists.com
Website: mktforartists.com
For the data described in sections 2 and 3 (visitors, enquiries and our own clients' contact and contract details), we are the controller. For the data inside our clients' accounts on Meta's platforms, our clients are the controllers and we act as their processor, as explained in section 4.
We are not required to appoint a data protection officer. Questions about this policy go to the email address above.
Data you give us directly
Contact form and email
When you write to us through the form on our website or by email, we receive your name, your email address, your website or social profile if you include it, the option you choose about what you need, and the message you write.
We use this to reply to you, to prepare a discovery call and, if you ask for one, a proposal. The legal basis is the steps taken at your request before entering a contract (GDPR, Article 6(1)(b)) and our legitimate interest in answering the people who write to us (Article 6(1)(f)).
Discovery calls and proposals
During a discovery call we take notes about your business: what you offer, who your students or collectors are, your goals and the numbers you choose to share. We use those notes only to prepare a proposal for you.
Clients
When you become a client, we also process your contact details, the details needed for the contract and for invoicing, your brand materials, your approvals of the work we produce, and the correspondence needed to run the work. The legal basis is the performance of our agreement with you and, for invoicing records, our legal obligations under Portuguese tax law.
We do not collect special categories of personal data, and we do not ask for them.
Cookies and website data
This website uses cookies that are strictly necessary for it to work. They need no consent and cannot be switched off.
Where this website uses analytics or advertising tools, including the Meta Pixel, they are set only after you accept them in the cookie banner, and you can withdraw that acceptance at any time from the same banner or by deleting the cookies in your browser. The Meta Pixel lets Meta measure the results of our advertising and show our advertising to people who visited this website; the data it collects is processed by Meta under its own privacy policy. At the date shown at the top of this policy, no analytics or advertising tool is active on this website.
Our hosting provider keeps standard server logs (IP address, browser type, pages requested and the time of the request) to keep the website secure and running. Those logs are held by the provider under its own retention rules, and we do not use them to identify visitors.
Client accounts and Meta platforms
When you hire us, you give us access to assets you own on Meta's platforms: Facebook Pages, Instagram professional accounts, ad accounts and Business Manager (also called Business Portfolio). You grant that access yourself, inside your own Business Manager, either by adding Marketing for Artists as a partner or by adding a named member of our team with a defined role. We never ask for your personal Facebook or Instagram password.
Who is responsible for what
You remain the data controller for everything inside your accounts, including data about your followers, customers and audiences. We act as your processor: we handle that data only on your documented instructions, set out in our service agreement, and only to provide the services you have contracted.
What we access
Page and account information: names, identifiers, profile images and settings.
Content: posts, stories, captions and comments, and, where community management is part of your agreement, messages sent to your Page or account.
Performance data: reach, impressions, engagement, follower counts, ad spend, results and conversions, as Meta provides them, in aggregated form.
Advertising assets: campaigns, ad sets, ads, audiences and creative, and the billing summaries Meta shows inside the ad account. We never see or hold your card details.
What we do with it
We use the data obtained through Meta's platforms and tools exclusively to deliver the services set out in your agreement: planning and publishing content, managing campaigns, responding to comments and messages where agreed, and preparing reports for you.
We do not sell this data. We do not share it with anyone outside the delivery of your services. We do not use it to build profiles of your followers or customers, to train models, or for our own marketing. We keep your data separate from that of our other clients. We do not keep it after our work for you ends, except as described in sections 5 and 6.
Compliance with Meta's terms
Our use of Meta's platforms, tools and APIs, including the developer application we use to connect our own tools to Meta, complies with the Meta Platform Terms and the Meta Developer Policies. We request only the permissions the services require, we use the data only for those services, we keep each client's data separate from every other client's, we keep access tokens encrypted, we limit access to the people who work on your account, and we remove access when the work ends.
Data deletion and removing our access
Remove our access yourself
You can remove our access at any time, without asking us. In Meta Business Manager, open Business settings, then Partners (if you added Marketing for Artists as a partner) or People (if you added a member of our team), select us and remove the access. The change takes effect immediately for the Pages, Instagram accounts and ad accounts concerned.
If you connected an account through our platform, you can also disconnect it there. And you can always remove our application from your Facebook account under Settings and privacy, then Settings, then Apps and websites.
Ask us to delete data
Email geral@mktforartists.com with the subject line Data deletion request. Tell us which business, Pages or accounts the request concerns.
We confirm that we have received your request within 5 working days.
We delete the data within 30 days of your request and tell you when it is done. This covers exported performance data, reports, drafts, media files and any platform data we hold, wherever we store them.
What we may have to keep
Portuguese tax and accounting law requires us to keep invoices, contracts and the correspondence that supports them for 10 years. We keep those records only for that purpose, in restricted storage, and we do not use them for anything else. When the legal period ends, they are deleted.
Deletion without a request
We also delete the data we obtained through Meta's platforms about your accounts, as soon as reasonably possible and at the latest within 30 days, when our agreement ends, when you remove our access, when it is no longer needed for the services, and whenever Meta asks us to.
If you are not our client
If you follow or buy from one of our clients and want your data removed from their Page, account or customer list, please contact that client directly: they control that data. If you write to us instead, we will pass your request on to them and tell you that we have done so.
How long we keep data
Enquiries that do not become clients
12 months after our last exchange.
Discovery call notes and proposals
12 months after the proposal, or for the length of the agreement if you become a client.
Client contact, contract and billing data
For the length of the agreement, then for the 10 years required by Portuguese tax law.
Data obtained through Meta's platforms about your accounts
Only while we provide the services. Deleted as soon as reasonably possible, and at the latest within 30 days, when the agreement ends, when you remove our access, when you ask, or when Meta asks.
Reports we delivered to you
Copies are kept for 12 months after the agreement ends, so we can answer questions about past work. They contain aggregated figures only. Ask us and we delete them earlier.
Content, drafts and media files we produced for you
For the length of the agreement and 12 months after it ends, unless you ask for earlier deletion.
Server logs
Held by the hosting provider under its own retention rules.
Who we share data with
Service providers that we use to run the studio: website hosting, email, document storage, invoicing and accounting software, and the tools we use to plan, schedule and report on your marketing. They process data only on our instructions and under contracts that require them to protect it.
Meta, when we work inside your accounts. Meta processes that data under its own terms and its own privacy policy. Meta is not our processor.
Professional advisers, such as our accountant, where necessary to run the business, and public authorities where the law requires it.
We never sell personal data.
International transfers
We work from Portugal, in the European Union. Our clients are based around the world, many of them outside the European Economic Area, and the data in their accounts stays under their control. Some of the providers we use are based outside the European Economic Area, or process data there.
When personal data leaves the European Economic Area, we rely on the European Commission's Standard Contractual Clauses, on an adequacy decision (for example, for the United Kingdom) or on another safeguard permitted by the GDPR. You can ask us which safeguard applies in a given case.
Security
Access to your data is limited to the people who work on your account. The accounts we use to access Meta's platforms are protected by two-factor authentication. Access tokens issued by Meta are stored encrypted. When someone leaves our team or the work ends, their access is removed. If a security incident affects your data, we tell you and the supervisory authority as the law requires.
Your rights
Under the General Data Protection Regulation you have the right to:
access the personal data we hold about you;
have it corrected if it is inaccurate or incomplete;
have it erased, as described in section 5;
restrict how we use it while a question about it is resolved;
receive it in a portable format, or have it sent to another provider;
object to processing based on our legitimate interests;
withdraw consent at any time, where consent is the basis for processing.
We make no decisions about you based solely on automated processing.
To exercise any of these rights, email geral@mktforartists.com. We answer within one month. If a request is complex we may take up to two more months, and we will tell you why. We may ask you to confirm your identity before we act.
If you believe we have handled your data wrongly, you can complain to the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese supervisory authority, at cnpd.pt. If you live in another country, you can also contact the supervisory authority there.
Children
This website and our services are for adults and businesses. We do not knowingly collect data from anyone under 16. If you think a child has sent us data, write to us and we will delete it.
Changes to this policy
We update this policy when our services or the law change. The version in force is the one published on this page, with the date shown at the top. If a change affects how we handle data inside client accounts, we tell our clients directly.
Contact
For anything about this policy or your data, email geral@mktforartists.com or write to Cristiana Pereira Vieira, Marketing for Artists, Rua Engenheiro Adelino Amaro da Costa 10, 1.º Frente, Portugal.