Privacy Policy

Who this policy covers

This Privacy Policy explains how Paulo Custódio ("I", "me") collects, uses, and protects personal data submitted through paulocustodio.tech. It applies to visitors and prospective clients who use the contact form or email address on this site.

Data controller

Full identification details (NIF, registered address) are listed in the Legal Notice.

What data is collected

The contact form on this site asks for:

• Name — so I know who I'm speaking with
• Email address — so I can reply to your enquiry
• Project details — whatever you choose to share about the brand or site you want built

No other personal data is knowingly collected through this site. The site does not currently use analytics, tracking cookies, or third-party advertising scripts. If that changes, this policy — and a cookie consent banner — will be updated accordingly.

Why this data is collected

Submissions are used solely to respond to enquiries and discuss potential projects. The legal basis for this processing is consent (you choose to submit the form) and, where a project moves forward, performance of a contract.

How data is handled

[Update this section once the form is wired to a live endpoint.] Currently the form does not transmit data anywhere — submissions are only sent if you email directly. Once connected to a backend (e.g. a form service, email API, or CRM), name that service here, e.g.: "Form submissions are sent via [service name] and stored in [location] for as long as needed to handle your enquiry."

Data retention

Enquiry details and any related email correspondence are kept only as long as needed to respond to your enquiry or deliver a project, and are deleted or anonymised afterward unless a longer retention period is required by law (for example, invoicing records under Portuguese tax rules, typically retained for 10 years).

Sharing & third parties

Personal data submitted here is not sold, rented, or shared with third parties for marketing purposes. It may be shared with service providers strictly necessary to deliver a project (e.g. hosting, invoicing, or form-handling tools), each bound to handle data securely.

Your rights

Under the EU General Data Protection Regulation (GDPR), you have the right to:

• Access the personal data held about you
• Request correction of inaccurate data
• Request deletion of your data
• Restrict or object to certain processing
• Request a copy of your data in a portable format
• Lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD)

To exercise any of these rights, email hello@paulocustodio.tech.

Automated decision-making

No automated decision-making or profiling is carried out using data collected through this site.

Changes to this policy

This policy may be updated as the site or its tools change — for example, if analytics or a new form backend are added. The "last updated" date at the top of this page will reflect the most recent revision.