Data controller
Thrilling Agency OÜ, VAT EE102560859, based in Tallinn, Estonia, is the controller for personal data processed through doutoresdomarketing.pt and marketingdoctors.co. Doutores do Marketing and Marketing Doctors are the brands used on these websites.
For privacy enquiries and rights requests, contact info@thrilling.agency.
Data, purposes and legal bases
- Enquiries and bookings: your name, email, phone number, selected time and any information you choose to share. We use this to manage your meeting, send its details and respond to your enquiry, on the basis of steps taken at your request before entering a contract (GDPR Article 6(1)(b)). Required fields are identified on the form; without them, the booking may not be completed.
- Operation and security: hosting and security providers process your IP address and technical request data, based on our legitimate interest in delivering and protecting the service (Article 6(1)(f)).
- Language: the approximate country associated with your IP may determine the initial website version. An explicit choice of English takes priority and may be stored in a functional cookie for 180 days. We do not request your precise location.
- Advertising and marketing communications: require separate consent (Article 6(1)(a)). Booking a meeting does not authorise marketing campaigns. No advertising pixels or audience analytics tools are currently configured on these websites.
- Legal obligations: where a contractual relationship exists, we retain documents required by applicable law (Article 6(1)(c)).
The consultation concerns your business. Please do not submit health data, credentials or customers’ personal information in free-text fields. The website does not make solely automated decisions with legal or similarly significant effects on you.
Providers and international transfers
We use Vercel for hosting; Cloudflare for DNS, delivery and security where applicable; HighLevel/LeadConnector for the calendar and CRM; and Google Workspace/Meet for communication and meetings. The team member handling your meeting can access the data needed for the booking. We do not sell your data.
The calendar contacts its provider only when you choose to load available times. The provider then receives technical data and any information you submit in the form. Services may involve processing outside the European Economic Area, including in the United States, under applicable safeguards in processing agreements, such as standard contractual clauses and adequacy decisions where applicable. You can request information about these safeguards at the address above.
See the data processing terms of Vercel, Cloudflare, HighLevel and Google Workspace.
Retention
Business enquiries and contact records are kept for up to two years after the last contact, unless needed for a contract, a legal obligation or the establishment or defence of legal claims. In that case, retention is limited to the data and period necessary for that purpose. Contractual and accounting documents follow applicable statutory periods; this does not justify keeping all contact data for that period.
Cookie and language preferences last 180 days in this browser. Technical logs follow the hosting and security providers’ retention periods and incident investigation needs. We do not collect these logs to create advertising profiles.
Your rights
You may request access, rectification, erasure, restriction and portability of your data where applicable. You may object to processing based on legitimate interests and withdraw consent at any time, without affecting earlier lawful processing. For website advertising, use . For other requests, write to info@thrilling.agency.
We normally respond within one month. If a legally permitted extension is needed, we will explain the reason and timeframe. We may request only the information needed to confirm your identity.
You may complain to the data protection authority where you live or work, or where an alleged infringement occurred: in Portugal, the CNPD; in Estonia, the Estonian Data Protection Inspectorate.
Security and updates
The website uses HTTPS. Operational access to data is limited to people and providers who need it for the purposes described. We will update this policy when processing or providers change; new optional purposes require appropriate information and consent before activation.
Last updated: 14 September 2026.