Privacy Policy

1. Data controller

The controller responsible for processing your personal data is Secret Solution, Lda. (AMI 22238), with registered office at Rua Padre José Pinheiro Duarte, 443, 4470-191 Maia, Portugal, tax number (NIF) 517394871. For any question about privacy, you may contact us at geral.secretsolution@gmail.com or by phone on +351 910 430 084.

2. Data we collect

• Contact form: name, phone number or email address, and the message you send us.
• Statistics cookies: only with your consent, website usage data collected by PostHog (pages visited, time spent on each page, referral source, device type), hosted within the European Union, and by Google Analytics 4, operated by Google Ireland Limited, which may involve the transfer of data to the United States under the EU-U.S. Data Privacy Framework. If you leave us a contact request, this browsing history is linked to your request through an internal identifier, so we can understand what you were looking for before contacting us. We do not record video or screen playback. Without your consent, no analytics cookie is placed and no browsing data is collected.

3. Purposes and legal basis

• Responding to your contact request. Legal basis: pre-contractual steps taken at your request (Article 6(1)(b) GDPR).
• Website usage statistics. Legal basis: your consent (Article 6(1)(a) GDPR), which you may withdraw at any time on the {{cookiesLink}} page.

4. Retention period

Contact form data is kept for as long as necessary to follow up on your request and, at most, for [RETENTION PERIOD, e.g.: 2 years] after the last contact, unless a longer period is required by law. Statistics data follows the retention periods configured in PostHog and Google Analytics.

5. Your rights

Under the GDPR, you have the right to access your data, to rectify it, to request its erasure, to request portability, to object to processing, and to withdraw your consent at any time. To exercise these rights, write to us at geral.secretsolution@gmail.com. You also have the right to lodge a complaint with the supervisory authority, the CNPD (Comissão Nacional de Proteção de Dados, www.cnpd.pt).

6. Processors and recipients

We do not sell your data. We rely on the following service providers, which process data on our behalf:

• Supabase: hosting of the database where contact requests are stored.
• PostHog: website usage statistics, hosted within the European Union, only with your consent.
• Vercel: website hosting.

7. Changes to this policy

We may update this policy to reflect legal or service changes. The version in force is always available on this page.