Privacy Policy

Controller: ESPELHOTEIMOSO - LDA., Lisboa, Portugal. Contact: info@etsmartbusiness.pt.

1. Data we collect

• Contact form: name, email, company, service of interest, message.
• Newsletter: email address.
• Technical: IP address (rate limiting & security), in server logs.

2. Purpose & legal basis (Art. 6 GDPR)

• Answering enquiries — consent (6.1.a) and pre-contractual steps (6.1.b).
• Newsletter — consent, withdrawable at any time.
• Site security — legitimate interest (6.1.f).

3. Retention

Leads: up to 24 months after last contact unless a contract follows. Newsletter: until consent withdrawal. Logs: max 90 days.

4. Sharing

We do not sell data. EU-based hosting and email providers act as processors under Art. 28 GDPR. No transfers outside the EEA without adequate safeguards.

5. Your rights

Access, rectification, erasure, restriction, portability, objection, and consent withdrawal — email info@etsmartbusiness.pt. You may lodge a complaint with the CNPD (www.cnpd.pt).