Privacy policy

Who is responsible for your data

The controller of the personal data collected on this website is [POR PREENCHER: legal name], VAT number [POR PREENCHER: VAT number], with registered office at [POR PREENCHER: registered address]. For any privacy question, write to hello@palumen.com.

What data we collect

We only collect the data you give us in the contact form:

• name, email and, optionally, the name of your company or brand and your website address;
• what you need, the budget range, the timeline and your message;
• how you heard about us, if you choose to answer.

To prevent abuse, we also store an irreversible code (hash) of the sender's IP address and browser type. We never store the IP address in plain text. We also store the page of the site you came from to reach the form, so we know which pages lead to requests.

What we use it for

We use this data only to reply to your request, prepare a proposal and, if we move forward, manage the project. The legal basis is taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR). The IP hash is used to limit abusive requests, based on our legitimate interest in protecting the website (Article 6(1)(f)).

How long we keep it

We keep requests that don't become a project for 12 months. After that, they're deleted automatically. If a request does become a project, the data follows the legal retention periods for invoicing and the contractual relationship.

Who processes data on our behalf

We use these service providers, who process data only on our behalf:

• Vercel, website hosting and cookie-free visitor statistics;
• Supabase, database where contact requests are stored;
• Resend, sending the email notification for each request, and the confirmation to you.

Requests are processed and stored in the European Union (Paris).

[POR PREENCHER: region the Resend emails are sent from, and the safeguards for international transfers if it is outside the European Union.]

Your rights

You can request access, rectification, erasure, restriction or portability of your data, and object to its processing, by writing to the email above. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD) at www.cnpd.pt.