Privacy policy (draft)

Draft, to be reviewed before launch.

Controller: [legal entity name, address, NIF], contact privacy@portugalfetch.com.

Data we collect: email address (newsletter, alerts); payment details handled by Stripe (we do not store card data); basic, cookieless usage analytics.

Legal basis: consent (newsletter, double opt-in); contract (paid alerts); legitimate interest (security, fraud prevention).

Processors: Vercel (hosting), Resend (email), Stripe (payments). Some processing may occur outside the EEA under Standard Contractual Clauses.

Double opt-in: we only add you to the newsletter after you click the confirmation link we email you; every email includes an unsubscribe link.

Retention: until you unsubscribe or close your subscription; billing records as required by Portuguese tax law.

Your rights: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time. You can complain to the CNPD (cnpd.pt).

Cookies: only strictly necessary cookies; no advertising trackers.