1. Data controller
The controller of the personal data collected on this website is the entity identified below. In this document, “I” refers to that entity.
- Company
- Consultor de Marketing Digital
- Legal form
- Sole trader (empresário em nome individual)
- NIF (tax ID)
- PT256990727
- Registered address
- Travessa da Estrada Nova 190, 3885-062 Arada, Portugal
- CAE (economic activity code)
- 70200
- Phone
- +351 916 234 466
Contact for privacy matters: info@consultordemarketingdigital.pt. I have not appointed a Data Protection Officer, as this is not diretrizry in my case.
2. What data I collect and why
Contact form, proposal requests and free audit
I collect your name, email, company, online store address and the message you write. I use this data to reply to your request and, where applicable, to prepare a proposal. Submitted data is forwarded, through an automation in Make, to the Sender CRM, where I manage it.
If you tick the marketing consent box, which is separate and optional, your email is also added to my email marketing list in Sender. If the box is not ticked, the form data is not used for marketing.
Profit leak simulator
If you use the free simulator, I collect the address of your online store, the answers you give to the questions (for example revenue band, margin, tools and channels you use) and, at the end, your name, email and, if you choose to provide them, your phone number, company and role. I use this data to calculate the diagnostic, generate the PDF report, send it to your email and contact you about the result. Consent to this processing is required to receive the diagnostic. Consent to receive marketing communications is optional and you can withdraw it at any time.
To analyse the store, the simulator reads the home page of the address you give and uses Google PageSpeed Insights to measure speed; only the public store address is sent to it. The PDF report is stored on the site server for 30 days and then deleted automatically. Your data is stored on the site and in Sender.net, and kept for as long as needed to respond to your request or until you ask for it to be deleted.
Newsletter
I collect your email and, optionally, your name, to send the newsletter. Subscription depends on your consent, is confirmed by email (double opt-in) and is managed in Sender. You can unsubscribe at any time using the link in every email.
Call booking
When you book a call through NeetoCal, I collect your name, email, the date and time you choose, and your answers to the booking questions. I use this data to prepare and hold the call.
Measurement
Google Tag Manager and Google Analytics 4 are only activated after you give consent in the consent management platform (CookieYes), using Google Consent Mode v2. They help me understand how the website is used and improve it. Details are in the Cookie Policy.
Links to tools
Links in the tools directory go through /go/{tool}/ addresses. I only record aggregated click counts per tool, without building personal profiles. Technical server logs may include your IP address and are kept for a limited period (see section 6).
Some of these links are affiliate links, described on the Affiliate Disclosure page. After you click, you move to a third-party website, which processes your data under its own privacy policy.
3. Legal bases
- Consent: newsletter, email marketing, analytics cookies.
- Pre-contractual steps and performance of a contract: replying to contact and proposal requests, booking calls, providing services.
- Legal obligation: invoicing and tax obligations.
- Legitimate interest: website security and aggregated click counts.
Where processing is based on legitimate interest, you may ask me for information about the assessment I carried out and object to the processing.
4. Recipients and processors
I do not sell personal data. I use service providers that process data on my behalf under data processing agreements. The up-to-date list is on the Subprocessors page. I may also disclose data to authorities where required by law.
5. International transfers
Some providers may process data outside the European Economic Area, in particular in the United States. In those cases, the transfer relies on a European Commission adequacy decision or on standard contractual clauses. The providers involved are identified on the Subprocessors page.
6. Retention periods
- Contact, proposal and audit requests that do not lead to a contract: 12 months.
- Newsletter and marketing: until you withdraw consent, plus 3 years as proof of consent.
- Bookings: 12 months.
- Invoicing documents: 10 years, according to the applicable legal period.
- Google Analytics 4 data: 14 months.
- Technical server logs, including IP addresses: up to 2 months.
7. Your rights
You may request access, rectification, erasure, restriction of processing and portability of your data, and object to processing based on legitimate interest. You may withdraw your consent at any time, without affecting the lawfulness of processing already carried out.
To exercise these rights, write to info@consultordemarketingdigital.pt. I will reply within the one-month period set by the GDPR, which may be extended by two further months in complex cases, in which case I will inform you. You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
8. Security
I apply appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure, including encrypted connections (HTTPS/TLS), two-factor authentication in the administration area, access control, backups and regular software updates.
9. Minors
This website is intended for professionals and businesses. I do not knowingly collect data from anyone under 18. If I become aware that I have collected such data, I will delete it.
10. Changes to this policy
I may update this policy when processing activities or the law change. The date of the last update is shown at the top of the page.