Legal

Privacy Policy

Last updated: September 2026

Quick Response ("we", "us", "our") respects the privacy of everyone who visits this site and everyone we work with, and complies with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679).

This policy explains what personal data we collect, why, for how long, who we share it with, and what your rights are.

1. Who is the data controller

Quick Response

Rua Dr. Mário Viana 2, 4740-266 Esposende, Portugal

Phone: +351 913 794 329

Email: info@quickresponse.pt

Founded in 2001, Quick Response is a B2B textile agency producing personalised merchandise and apparel for companies, selling from Portugal to clients across Portugal and the rest of Europe. The Yes We Brand label operates under the same legal entity.

For any question about your personal data, please contact us at the email above.

2. What data we collect and why

a) Quote Request form

When you request a quote, we collect: name, email, company, phone number, and the details of your request (product, specifications, artwork you submit).

Why: to prepare and send you a commercial proposal, and to set up your customer record if you go ahead with an order.

b) Contact form

Name, email, and the message you send us.

Why: to reply to your enquiry.

c) Portal account (customers and suppliers)

If you become a customer or a supplier, we create an access account to the portal (email, contact name, company, billing/shipping address where applicable) so you can track quotes, samples, and production.

Why: to manage the business relationship — quotes, samples, production, orders, invoicing.

d) Technical and anti-spam data

We use Cloudflare Turnstile to distinguish humans from bots on our public forms. This may involve analysing technical signals from your device/browser (without asking you to solve visual puzzles).

Why: to protect our forms from spam and automated abuse.

We do not use advertising cookies or build behavioural marketing profiles.

3. Legal basis for processing

  • Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR): quote requests, order management, portal accounts.
  • Consent (Art. 6(1)(a) GDPR): when you tick the consent checkbox on our public forms — you can withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
  • Legitimate interest (Art. 6(1)(f) GDPR): anti-spam/anti-fraud protection of our forms, site security.
  • Legal obligation (Art. 6(1)(c) GDPR): retention of accounting and tax records, where applicable.

4. How long we keep your data

  • Quote requests that don't convert into a customer: for up to 2 years after last contact, unless you request earlier deletion.
  • Active customer and supplier data: for as long as the business relationship lasts, and afterwards for the legal retention period applicable to tax and accounting records (in Portugal, generally 10 years for accounting documents).
  • Contact messages: until answered and resolved, then deleted or archived for a reasonable period.

5. Who we share your data with

We do not sell or rent personal data to third parties. We only share data with:

  • Technical service providers who help us run the site and system (hosting, Cloudflare anti-spam protection, email delivery), always under contractual confidentiality obligations.
  • Production suppliers, when necessary to fulfil your order (for example, we share the specification of your request, never your direct contact details, with the supplier responsible for production).
  • Authorities, when required by law.

International transfers

Some of our service providers (for example, anti-spam infrastructure) may process data outside the European Economic Area. In those cases, we ensure appropriate safeguards are in place (such as the European Commission's Standard Contractual Clauses).

6. Your rights

Under the GDPR, you have the right to:

  • Access your personal data;
  • Rectify inaccurate or incomplete data;
  • Erase your data ("right to be forgotten"), where applicable;
  • Restrict processing in certain circumstances;
  • Data portability — receive your data in a structured format;
  • Object to processing based on legitimate interest;
  • Withdraw consent at any time, where processing is based on it.

To exercise any of these rights, write to us at hello@quickresponse.pt.

If you are not satisfied with our response, you have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD) — Portugal's data protection authority (www.cnpd.pt) — or with the data protection authority of your own country of residence, if you are based elsewhere in the EU.

7. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, or alteration — including access restricted to portal accounts isolated per customer/supplier and secure connections (HTTPS).

8. Changes to this policy

We may update this policy from time to time. The date at the top shows the latest version. Significant changes will be clearly communicated on the site.

9. Contact

Quick Response

Rua Dr. Mário Viana 2, 4740-266 Esposende, Portugal

+351 913 794 329

info@quickresponse.pt