Privacy Policy

01 Data Controller

The data controller responsible for your personal information is:

For any questions about this Privacy Policy or how your data is handled, please contact us using the details above.

02 Scope of This Policy

This policy applies to personal data processed through our website, email correspondence, contact forms, and any digital channels operated by Nuance Flow, Unipessoal Lda in connection with IT marketing and related services.

It does not apply to third-party websites linked from our pages. We encourage you to review the privacy practices of any external site you visit.

03 Information We Collect

Depending on how you interact with us, we may collect the following categories of data:

Information you provide directly

• Name and contact details (email address, phone number, company name)
• Content of messages, enquiries, and project briefs sent to us
• Any other information you choose to share when requesting our services

Information collected automatically

• IP address, browser type, device type, and operating system
• Pages visited, time spent on pages, and referral source
• Cookie identifiers and similar technical data (see Section 06)

04 How We Use Your Information

We process personal data for the following purposes:

• Responding to enquiries and providing information about our IT marketing, web development, and e-commerce services
• Preparing proposals, quotations, and project documentation
• Delivering contracted services and maintaining client communication
• Operating, maintaining, and improving our website and digital infrastructure
• Analysing website usage to enhance user experience and content relevance
• Complying with legal obligations applicable in Portugal and the European Union

05 Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases:

• Consent — where you have agreed to the use of non-essential cookies or subscribed to communications
• Contractual necessity — where processing is required to respond to your request or perform a service agreement
• Legitimate interests — to operate and secure our website, prevent fraud, and improve our services, provided your rights do not override these interests
• Legal obligation — where we must retain or disclose data to comply with applicable law

06 Cookies and Similar Technologies

Our website uses cookies — small text files stored on your device — to ensure proper functionality and to understand how visitors use our pages.

Essential cookies

Required for core website operation, including security and cookie preference storage. These cannot be disabled without affecting site functionality.

Analytics cookies

Used to collect aggregated, anonymous data about page visits and user behaviour. These are only activated if you accept cookies via our cookie banner.

You can manage cookie preferences through the banner displayed on your first visit, or by adjusting your browser settings. Note that disabling certain cookies may limit website features.

07 Data Sharing and Disclosure

We do not sell personal data. We may share information only in the following circumstances:

• With service providers who assist in hosting, email delivery, analytics, or technical infrastructure — bound by data processing agreements
• When required by law, court order, or regulatory authority in Portugal or the EU
• To protect the rights, property, or safety of Nuance Flow, Unipessoal Lda, our clients, or the public

All third-party processors are required to handle data in accordance with GDPR standards and only for specified purposes.

08 International Data Transfers

Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses approved by the European Commission — to maintain an equivalent level of data protection.

09 Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law.

• Enquiry and correspondence data — retained for the duration of the business relationship and a reasonable period thereafter
• Contract and project records — retained as required for accounting and legal compliance under Portuguese law
• Analytics data — retained in aggregated form and deleted when no longer needed for statistical purposes

10 Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your data where legally applicable
• Restriction — request limitation of processing in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests or for direct marketing
• Withdraw consent — withdraw consent at any time where processing is consent-based

To exercise any of these rights, contact us at info@nuance-flow.com. We will respond within the timeframe required by applicable law.

You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese data protection authority, if you believe your rights have been violated.

11 Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include secure hosting environments, encrypted connections (SSL/TLS), access controls, and regular review of our data handling practices.

While we take reasonable steps to safeguard your information, no method of transmission over the internet is completely secure. We cannot guarantee absolute security of data transmitted to our website.

12 Children's Privacy

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 16. If you believe we have inadvertently collected such data, please contact us and we will promptly delete it.

13 Changes to This Policy

We may revise this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or website functionality. The updated version will be published on this page. We encourage you to review this policy periodically.

14 Contact

For privacy-related enquiries, data subject requests, or questions about this policy, please contact: