Privacy Policy
This policy explains what personal data we process, why, for how long and what your rights are.
Last updated: 7 November 2026
1. Data controller
The data controller is CleanCode, VAT no. 275260488, with registered office at Câmara de Lobos, Quinta Grande, Madeira. For any question about personal data, contact telmosousa01@gmail.com.
2. What data we process
We process only the data you give us or that is needed for the website to work:
- Contact form and configurator: name, company, email, phone, your project choices and the message you write.
- Technical request data: page of origin, language, date and consent version.
- Protection against abuse: a code derived from your IP address, without storing the address itself.
3. Purposes and legal basis
- Responding to your request and preparing a proposal: pre-contractual steps and your consent.
- Protecting the website against spam and abuse: legitimate interest in keeping the service secure.
- Complying with legal obligations, where applicable.
4. How long we keep data
We keep requests that do not lead to a contract for up to 24 months after the last contact, unless you ask us to erase them sooner. If we enter into a contract, data is kept for the period required by law.
The code used to limit repeated submissions is deleted automatically after a short time.
5. Who has access to the data
We do not sell personal data. We use service providers that process it on our behalf, solely to provide the service:
- Supabase: database and authentication.
- Resend: sending the internal email alert when we receive a request.
- The website's hosting provider.
- OpenStreetMap Foundation: map on the contact page, only if you load it.
6. Transfers outside the European Union
Some providers may process data outside the European Economic Area. In those cases, the transfer relies on safeguards provided for in the GDPR, such as the European Commission's standard contractual clauses.
7. WhatsApp
If you choose to contact us on WhatsApp, you send the message yourself through that service, which is operated by WhatsApp/Meta and subject to its own privacy policy. Nothing is sent without your confirmation in the app.
8. Your rights
Under the GDPR, you can request access to, rectification, erasure, restriction and portability of your data, and object to its processing. You can withdraw your consent at any time, without affecting earlier processing. To exercise these rights, contact telmosousa01@gmail.com.
You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt).
9. Security
We apply technical and organisational measures to protect data, including encrypted connections and access restricted to the authorised team.
10. Changes
We may update this policy. The date of the last update is shown at the top of the page.