1. Data Controller
Bool, Lda. ("Bool", "we", "us"), VAT no. PT510768105, is the data controller responsible for processing your personal data.
Registered address: Kube Coworking, R. do Centro Cultural 27A, 1700-106 Lisboa, Portugal. You can contact us at info@bool.pt or +351 219 345 678.
2. Data We Collect
We collect the following categories of personal data:
- Contact form submissions — name, email address, phone number (optional), and message content.
- Newsletter subscriptions — email address.
- Analytics data — anonymised IP address, pages visited, time on site, and browser/device information (only with your consent).
- Error monitoring data — technical error logs including browser type and page URL (only with your consent).
3. Legal Basis for Processing
- Consent (Art. 6(1)(a) GDPR) — for analytics cookies, marketing communications, and error monitoring.
- Legitimate interest (Art. 6(1)(f) GDPR) — for responding to contact form inquiries and ensuring website security.
4. How We Use Your Data
- To respond to your inquiries submitted via the contact form.
- To send marketing communications you have subscribed to.
- To understand how visitors use our website and improve it (analytics).
- To detect and fix technical errors (error monitoring).
5. Third-Party Processors
We share personal data with the following processors, all of which have appropriate data processing agreements in place:
- Google Analytics (Google LLC) — website analytics. IP addresses are anonymised. Data may be transferred to the US under Google's EU-US Data Privacy Framework certification.
- Sentry (Functional Software, Inc.) — error monitoring. Processes technical error data only with your consent. When an error occurs, Sentry may capture a session replay; all text, form inputs, and media are masked so no personal data is recorded.
- Amazon Web Services (AWS) — hosts our contact form and newsletter processing endpoints. Data is processed within the EU (eu-west-3 region, Paris).
- Cloudflare Turnstile (Cloudflare, Inc.) — bot prevention on forms. Processes interaction data to verify you are human.
6. Data Retention
- Contact form data — retained for 12 months after the inquiry is resolved, then deleted.
- Newsletter subscriptions — retained until you unsubscribe.
- Analytics data — retained for 14 months (Google Analytics default).
- Error monitoring data — retained for 90 days.
- Consent records — your consent choices are stored locally on your own device (in your browser's local storage), not on our servers. They remain until they expire after 365 days, until you withdraw consent, or until you clear your browser storage.
7. Your Rights
Under GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate data.
- Erasure — request deletion of your personal data ("right to be forgotten").
- Restriction — request that we limit processing of your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — withdraw previously given consent at any time via the "Cookie preferences" link in the footer.
To exercise any of these rights, contact us at info@bool.pt. We will respond within 30 days.
8. Cookies
For detailed information about the cookies we use, please see our Cookie Policy.
9. International Transfers
Some of our processors are based in the United States. Transfers are protected by EU Standard Contractual Clauses or the EU-US Data Privacy Framework, as applicable.
10. Supervisory Authority
You have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados — CNPD) at www.cnpd.pt.
11. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated via a banner on the website.