Who is responsible
The company Blendbyte — Tecnologias de Informação e Marketing Digital, Lda., company tax number 516257064, with its registered office at Campo Grande, n.º 28, 4.º B, 1700-093 Lisboa, Portugal, is the controller for the processing described in this policy.
For privacy questions or to exercise your rights, email geral@blendbyte.pt, with “Privacy” in the subject line. You can also write to our registered office. See the full company details.
This policy covers website visitors and contacts representing clients, prospective clients and partners. Services provided on behalf of clients may have their own privacy information.
What data we process and why
When you visit the website
The hosting infrastructure may process your IP address, access date and time, page address, browser characteristics and technical identifiers to deliver pages and protect the service against abuse. The legitimate interest is to keep the website available and secure. Cookies and their conditions are described in the Cookie Policy.
When you allow measurement or advertising
With consent for measurement, we use Google Analytics 4 to understand visits and website usage. With consent for advertising, we use Meta Pixel to measure campaigns and connect visits with ads. These providers may receive your IP address, browser data, pages visited and online identifiers. We do not send form fields to these tools. Each purpose is optional and can be refused or disabled under Manage cookies.
When you contact us
The website provides a form for sharing business challenges, alongside email and telephone links. In the form, we ask for your name, email, company and a description of the challenge. You may also provide your company’s Portuguese tax number, telephone, areas of difficulty, desired outcome and timeframe. Optional fields are identified. If you open the form from a service link, the service name may accompany the request to help us understand its context. Submissions are processed by the website’s server and forwarded through our email service to geral@blendbyte.pt. Email links still open your email application; in that case, the message is only sent when you choose to send it in that application.
When contacting us, you may provide your name, email, telephone, company, role and message content. We process the information needed to respond, understand the request, prepare a proposal and manage the professional relationship. Contacts may be recorded in our CRM.
For contact on behalf of a company, the basis is our legitimate interest in responding and managing the business relationship. Where the data subject contacts us about a contract to which they will be a party, the basis is taking the requested pre-contractual steps or performing that contract.
Contact is voluntary. Without enough information about the request and a way to reply, we may be unable to follow up. Send only necessary data; avoid identification documents, health data or irrelevant confidential information about others.
Obligations and rights
Where applicable, we retain records required by legal obligations, particularly accounting and tax obligations. Information strictly necessary to exercise or defend rights may be processed on the basis of that legitimate interest.
Simply contacting us does not subscribe you to advertising. This website does not make solely automated decisions with legal or similarly significant effects. If you allow advertising, Meta may connect your visit with other data under its policies.
Who may access the data
The website and form are hosted on Vercel. We use a Neon database only for technical references to prevent abuse and duplicate submissions; it does not store request contents. Our cPanel hosting email service receives messages at geral@blendbyte.pt, and we use Microsoft 365 for work tools and our own CRM hosted on Vercel. Access to CRM contacts is limited to team administrators. Form requests are sent through an authenticated, encrypted connection to mail.blendbyte.pt. If submission fails, fields remain filled while the page is open; you can copy the message or open your email application to send it. We do not save a draft in browser storage.
Email, hosting, database, maintenance and security providers may process data as necessary to provide their services. Information may also need to be disclosed to public authorities or advisers where legally required or necessary to defend rights.
When you allow optional tools, Google and Meta receive the browsing data described above. See the privacy policies of Google and Meta.
Processing outside the European Economic Area
The cloud services we use may involve processing outside the European Economic Area, including in the United States. You should not assume that all data remains in Portugal or the European Union.
Providers’ terms include mechanisms such as standard contractual clauses or adequacy decisions, depending on the service and transfer. You can consult the data protection terms of Microsoft and Vercel. For information about the safeguards applicable to the processing of your data, contact us.
How long we keep data
Retention depends on the purpose and status of the request. The following criteria apply:
- Form: messages received by email follow the criteria below. To limit abuse and prevent duplicate submissions, the website keeps a random reference, date, submission status and cryptographic codes for the request and IP address, without storing form contents in that table. Records older than 24 hours are deleted on the next submission. No message archive is created in FormSubmit.
- Information requests: for as long as needed to respond and complete the enquiry. Once the matter is closed, information no longer needed is normally deleted.
- Proposals and opportunities: during active negotiation or business follow-up. Rejection, closure of the opportunity or the end of follow-up triggers a review and deletion of data with no current purpose.
- Contractual relationships: during the relationship and afterwards only for periods required by applicable obligations or necessary to exercise and defend rights.
- Privacy requests and disputes: only as needed to handle the request, demonstrate the response and comply with applicable statutory periods.
- Cookies: browser storage periods are set out in the Cookie Policy. Data retention within Google and Meta services depends on their settings and terms; you can request information or erasure through the contacts in this policy. Hosting technical logs also follow the provider’s terms and their operational and security purposes.
These criteria do not permit contacts to be kept indefinitely because they might be useful. You may ask which criterion applies to your case and request erasure under the conditions set by law.
Your rights
Subject to the conditions set by law, you may request access, rectification, erasure, restriction and portability of your data. You may object to processing based on legitimate interests, taking your situation into account, and to direct marketing processing at any time. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.
Send your request to geral@blendbyte.pt. Where there is doubt, we may request only the information needed to confirm your identity. Responses are generally free and provided within one month; in cases permitted by law, this may be extended by two further months, with the reason explained within the first month.
You may lodge a complaint with the Portuguese Data Protection Authority (CNPD), without having to contact Blendbyte first.
Links and changes
Maps and social networks open through external links. When you use them, their providers’ policies also apply. This policy will be updated when functionality or data processing changes; the update date appears at the start.