Privacy Notice
This notice explains what personal data this website collects, why, and what you can do about it. The short version: the only personal data I receive from you is what you choose to send through the contact form, I use it to reply to you, and I don't track you or sell anything.
Who I am
The controller responsible for your personal data is Tiago Martins Peres, Unipessoal Lda, a company registered in Portugal (VAT PT516620282). You can reach me about anything in this notice through the contact form, just mention that your message is about privacy.
What I collect
When you contact me. The contact form (and the email field in the hero) asks for your email address and your message, and optionally your name, company, and a rough budget or timeline. I only receive what you choose to type and submit.
Technical data. Like any website, mine sees basic technical information, such as your IP address and standard request details, which my hosting provider processes to serve and protect the site, and which the form service processes when you submit a message. I don't build profiles of you, and I don't follow you around other websites.
No cookies. This site sets no cookies and runs no advertising or cross-site tracking.
Why I use it, and my legal basis
I use your message only to read it, reply, and, if we go on to work together, to scope and deliver the work. Under the GDPR my legal bases are taking steps at your request before entering a contract (Article 6(1)(b)), and my legitimate interest in responding to enquiries and keeping the site secure (Article 6(1)(f)).
Who else processes your data
To run the site and receive your messages I rely on a small number of service providers, acting as my processors:
- Google (Apps Script and Gmail): the contact form submits to a Google Apps Script that runs under my own Google account and emails your message to my Gmail inbox, where I read it and reply (privacy policy).
- Cloudflare: hosting, content delivery, security, and bot protection on the contact form (Turnstile, which sets no tracking cookies) (privacy policy).
I don't sell your data and I don't share it for advertising. I'll only disclose it if the law genuinely requires it.
International transfers
Some of these providers operate outside the European Economic Area, including in the United States. Where your data is transferred outside the EEA, it is covered by appropriate safeguards (such as the European Commission's Standard Contractual Clauses or an equivalent framework) put in place by those providers.
How long I keep it
I keep your message for as long as I need it to respond and follow up, and, if we work together, for as long as our working relationship and any legal obligations require. If you'd like me to delete your data sooner, just ask.
Your rights
Under the GDPR you have the right to access the personal data I hold about you, have it corrected or erased, restrict or object to how I use it, and receive it in a portable format. Exercising any of these is free.
How to make a request
Send me a note through the contact form and mention that it's a privacy request. I'll acknowledge it promptly and respond within one month, as the GDPR requires.
Complaints
If you think I've mishandled your data, I'd like the chance to put it right, but you also have the right to complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
Changes to this notice
If I change how the site handles personal data, I'll update this page and the date at the top.