Privacy Policy

Last updated: 2026-08-18

This policy explains what personal data we collect through lisbonseo.com, why we process it, how long we keep it, and what rights you have under the General Data Protection Regulation (GDPR).

1. What data we collect

Data you provide directly

When you complete a contact or audit request form, we collect the details you give us — typically your name, email address, phone number (if provided), the website to be analysed, and the content of your message. These fields are those needed to answer your request.

Data collected automatically

As on most websites, our server records technical information about each visit: IP address, browser and device type, pages visited, date and time, and the source of the visit. We also use a usage statistics service to understand which pages are consulted and how the site is navigated.

2. Why we use it

• To answer enquiries and prepare proposals. Legal basis: steps taken at your request prior to entering into a contract.
• To deliver contracted services to clients, including follow-up communication and reporting.
• To improve the site and measure its use, on the basis of our legitimate interest in maintaining and improving the service.
• To comply with legal obligations, including tax and accounting requirements where applicable.

We do not use your data for automated decisions producing legal effects, nor for profiling of that nature.

3. Cookies and similar technologies

The site uses cookies that are strictly necessary for it to function, and cookies that measure usage. Necessary cookies cannot be disabled without affecting how the site works. You may block or delete cookies at any time through your browser settings; if you do, some features may no longer work correctly.

4. Who we share data with

We do not sell personal data. We may share it with service providers acting on our behalf and under written instructions — in particular website hosting, email services, and the analytics and SEO tools used to deliver our services. We may also disclose data where required by law or by a competent authority.

Some of these providers may process data outside the European Economic Area. Where that happens, the transfer relies on mechanisms provided for in the GDPR, such as standard contractual clauses approved by the European Commission.

5. How long we keep it

• Enquiries that do not lead to a contract: up to 12 months after the last contact.
• Client data: for the duration of the contractual relationship and for the legal retention periods that apply afterwards.
• Technical logs and statistics: for short periods, or in aggregated form that does not identify the user.

6. Your rights

As a data subject you have the right to request access to your personal data, its rectification or erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.

To exercise any of these rights, write to [email protected]. We will respond within the period set by law. If you believe the processing of your data infringes applicable legislation, you have the right to lodge a complaint with the Portuguese data protection authority (CNPD).

7. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or improper disclosure, including encrypted connections (HTTPS) and restricting access to information to those who need it.

8. Changes to this policy

This policy may be updated when necessary. The date of the last update appears at the top of this page. Substantial changes will be signalled visibly on the site.

9. Contact

For any question about this policy or about the processing of your personal data: [email protected].