1. Controller
Personal data collected through coelhobranco.eu is processed by It's Our Home Algarve, Lda., trading as Coelho Branco. Tax number (NIF) 503698350. Registered office: Estrada de Santa Eulália, Edifício Pórtico, 2C, 8200-269 Albufeira, Portugal. Email: geral@coelhobranco.eu. Phone: +351 925 221 145.
For any question about your data, write to geral@coelhobranco.eu.
2. Data we collect
- Contact and free audit forms: name, phone, email (optional), business name, website or social media profile, message, the page you sent it from, language and date. To limit automated submissions, we also store an encrypted code (hash) of the IP address, which does not reveal the original address.
- Price calculator: the options chosen, the amounts, a calculation code, the page, language and date. A calculation is only linked to you if you send it with a contact request or by WhatsApp.
- Correspondence: the data you send us by email, phone or WhatsApp.
- Service delivery: contact details of the client's representatives, billing details and the access and materials needed for the service (for example, access to the business's Google profile or social media).
- Technical data: server logs (IP address, date and time, page requested, browser), kept by our hosting provider for security.
- Usage statistics: only if you accept analytics cookies, Google Analytics collects data about your visit (pages viewed, where you came from, device, approximate country or city and the options used in the calculator), in pseudonymised form.
We do not request special-category personal data and do not use solely automated decision-making or profiling.
3. Purposes and legal bases (GDPR Article 6)
| Purpose | Legal basis |
|---|---|
| Replying to requests, preparing the audit or a proposal | Pre-contractual steps at the data subject's request (b) where applicable; legitimate interests for company representatives. |
| Delivering a contracted service | Performance of a contract (b) where applicable; legitimate interests for professional contacts. |
| Invoicing and tax obligations | Legal obligation (c). |
| Website security and abuse prevention | Legitimate interests (f). |
| Website statistics (Google Analytics) | Consent (a), which you can withdraw at any time under “Cookie settings”. |
| Future marketing communications | According to recipient type and applicable electronic communications rules; prior consent where legally required. |
We will not send mass email marketing campaigns at launch. In the future, we may provide business customers with information about relevant services, subject to legal conditions, suppression lists and the right to opt out at no cost. Where prior consent is required for a contact, we will obtain it before sending marketing communications. Each commercial message will include a means to unsubscribe or object.
4. Who receives your data
Dominios.pt, our website, enquiry database and email hosting provider; subcontracted professionals (for example, photography and video) receiving only the data and materials needed for the service under applicable confidentiality and data-processing terms; our certified accountant and public authorities where required by law; Google Ireland Limited (Google Analytics), only with your consent. When you contact us on WhatsApp, Meta processes the data under its own terms and privacy policy. We do not sell personal data. Google may transfer data to the United States under the EU-US Data Privacy Framework.
If any subcontractor processes personal data outside the European Economic Area, the transfer conditions will be checked in advance and appropriate GDPR safeguards implemented, including an adequacy decision or European Commission standard contractual clauses where required, together with any necessary supplementary measures.
5. Retention
Requests and calculations that do not lead to a contract: 12 months after the last meaningful interaction. Accounting and tax records for contracted clients: for the applicable statutory period, generally 10 years for records subject to that requirement. Operational files for completed services: 24 months after the service ends, except where a different period is required by contract, legal obligation or the defence of legal claims. Other contract and contact records are kept as long as needed for the relevant purposes and applicable legal periods. Server logs: the hosting provider's retention period. Google Analytics data: 14 months. Earlier erasure requests are assessed under the GDPR and applicable obligations.
6. Your rights
You may request access, rectification, erasure, restriction, portability (where applicable), and object to processing based on legitimate interests. You may withdraw consent at any time without affecting previous lawful processing. Write to geral@coelhobranco.eu; we normally reply within one month in accordance with the GDPR. You may also complain to the Portuguese data protection authority, CNPD (www.cnpd.pt).
7. Security
The site uses HTTPS. Access to the administration area and enquiries is limited to authorised team members. Subcontractors receive only the materials needed for each service.
8. Cookies
We use strictly necessary cookies and, only with your consent, Google Analytics cookies. We do not use advertising cookies. You can change your choice at any time under “Cookie settings” in the footer. Please see our Cookie policy.
9. Changes
We may update this policy; the date at the top shows the latest published version.