Privacy policy

1. Controller

The data controller is Intodetails, Lda, based at R das Oliveiras, Marina Sol, Loja A, 8125-472 Vilamoura, Loulé, Faro, Portugal. Contact: info.intodetails@gmail.com.

We have not appointed a data protection officer. For any question about your data, use the email above.

2. Data we collect

Contact form: name, email address, message content, and the time of sending. The server may also keep limited technical request data (for example to prevent abuse).

Strictly necessary cookies and local storage: your cookie choice and theme preference (light or dark). These are not used to track you.

Only with your consent: Google Analytics 4 (pages viewed, client/session identifiers, device type, browser language, and approximate traffic source) and Microsoft Clarity (clicks, scroll, mouse movement, and session recording). Form fields are typically masked by Clarity.

We do not create user accounts on this website and we do not ask for special-category data.

3. Purposes and legal bases

Replying to messages you send us: GDPR Article 6(1)(b) (steps at your request before a contract) and, where applicable, Article 6(1)(f) (legitimate interest in handling a business enquiry).

Storing your cookie choice and meeting our transparency duties: Article 6(1)(c) (legal obligation) and Portuguese Law 41/2004 on privacy in electronic communications.

Theme preference: necessary for the service you asked for (Law 41/2004, Article 5).

Usage statistics (Google Analytics) and session analysis (Microsoft Clarity): Article 6(1)(a) (consent). You may refuse or withdraw consent at any time without affecting your use of the site.

We do not use form data for marketing, newsletters, or advertising profiles.

4. Recipients

Contact-form messages are sent through EmailJS (EmailJS Inc.) to the company inbox hosted on Gmail (info.intodetails@gmail.com).

If you consent to analytics, Google Ireland Limited / Google LLC processes Google Analytics 4 data.

If you consent to session recording, Microsoft Ireland Operations Limited / Microsoft Corporation processes Microsoft Clarity data.

We do not sell personal data. Providers only receive what they need to perform their service for us.

5. Transfers outside the EEA

EmailJS, Google, and Microsoft may process data in the United States or other countries outside the European Economic Area. These providers publish the transfer tools they use (including Standard Contractual Clauses). Analytics and session recording are enabled only after your consent.

6. Retention

Contact messages: up to 12 months after the last reply, unless a longer period is required by law or an ongoing matter.

Cookie choice: 6 months, after which we ask again.

Theme preference: until you clear site data in your browser.

Google Analytics: up to 14 months, if you consented.

Microsoft Clarity: according to the provider’s settings (typically up to 13 months), if you consented.

7. Your rights

You have the rights of access, rectification, erasure, restriction, portability, objection, and, where processing is based on consent, to withdraw it at any time. Withdrawal does not affect processing already carried out.

To exercise these rights, write to info.intodetails@gmail.com, describe the request, and if needed the email used in the enquiry. We will reply within the legal time limit.

You may lodge a complaint with the Portuguese Data Protection Authority (CNPD): cnpd.pt.

8. Cookies

Cookie names, lifetimes, and how to change your choice are in the Cookie policy. Analytics and session-recording cookies are read or written only after you Accept, or after you save a custom choice that includes them.

9. Automated decisions and children

We do not take solely automated decisions with legal or similarly significant effects on you.

This website is not directed at children under 16. We do not knowingly collect children’s data.

10. Security and changes

The site is served over HTTPS. Access to contact messages is limited to people who need to reply. No website is risk-free; if we detect an incident that affects you, we will act as the GDPR requires.

We may update this policy. The date at the top is the version in force. Material changes will be reflected on this page.