Privacy policy

1. Who is responsible for your data

The data controller is the company identified in the Legal notice, which sets out the registered name, tax number, registered office and contact details.

We have not appointed a Data Protection Officer, as none of the situations in which the law requires one applies to us. Requests about personal data are handled directly by us, through the contact details on that page.

2. What we collect

We only collect data that you type into one of our forms. We do not buy contact lists, we do not combine what you give us with other sources, and we do not build profiles about you.

• What you tell us about the job: the service you want, the area of the country, the approximate size and when you would like to start.
• Whatever you write in your own words in the message field.
• How we reach you: name, email and, if you choose to leave it, phone number.
• The language you filled the form in, so that we answer you in that language.
• Where you came from: the page you landed on and, if you arrived through an advert, the campaign tags carried in the address.
• The IP address the request was sent from, collected to block automated submissions.

Required fields are marked on the form. Everything else can be left blank, and a sparse request still gets an answer.

3. What it is used for, and on what basis

Every piece of data we keep serves one of these three purposes:

• Answering your request, arranging the visit and preparing the quote. The basis is steps taken at your request prior to entering into a contract, under Article 6(1)(b) GDPR.
• Sending you an email confirming that the request arrived, with a summary of what you told us. Same basis.
• Protecting the form from automated submissions and abuse. The basis is our legitimate interest in keeping the site working, under Article 6(1)(f).

We do not use your data to send you advertising or newsletters. If we ever want to, we will ask you separately first.

4. How long we keep it

• The IP address: 90 days.
• A request that did not lead to a job: two years from the last contact, so that we can pick up the conversation if you come back to us.
• A request that led to a job: for the duration of the works and, afterwards, for the warranty and record-keeping periods the law imposes.

Once those periods are over, the data is deleted. You can ask us to delete it sooner, and we will, unless we are legally required to keep it.

5. Who else handles it

For the site to work, some companies process data on our behalf and on our instructions. These, and no others:

• Supabase, the database where the request is stored, on servers in France.
• Vercel, the hosting for the site.
• Resend, which sends the confirmation email to you and the internal notice to us.
• Cloudflare, which checks that the person submitting the form is a person and not a program.

Some of these providers may process data outside the European Economic Area, always under the safeguards set out in Chapter V GDPR, such as the standard contractual clauses approved by the European Commission. We do not sell or pass on your data to anyone for their own purposes.

6. What you can require of us

The law gives you these rights, and we honour them:

• To know what data of yours we hold and receive a copy of it.
• To correct anything wrong or incomplete.
• To have your data erased.
• To restrict what we do with it, or object to our using it.
• To receive the data you gave us in a file, so you can take it elsewhere.

To exercise any of these rights, write to us using the contact details in the Legal notice or through the quote form. We answer within one month. If you believe we have mishandled your data, you can complain to the Portuguese data protection authority (CNPD).

7. How we keep it safe

Requests are stored in a closed database that cannot be queried from the browser of anyone visiting the site: only our server writes to it, with a key that never leaves the server. The site is always served over an encrypted connection, and technical error logs contain no name, phone number, email or IP address.

8. Automated decisions

No decision about you is made by a program. A person reads your request, a person answers it, and a person prepares the quote.

9. Minors

This site is not aimed at minors and we do not knowingly collect data from them. If you become aware that a minor has left us data, tell us and we will delete it.

10. Changes to this policy

This page always shows the version in force. The version in force on the day you made your request is the one that applies to it.