Privacy policy

1. Who is responsible for your data

KreoLabs.io is the controller of the personal data described in this policy. For privacy questions or requests, email us.

2. Information we may collect

• Information you send us: your name, email address, company details and anything else you include when contacting us.
• Technical information: hosting and security systems may process IP address, browser and device information, requested pages, timestamps and security logs.

This website currently has no user accounts, payment functions or contact form.

3. How we use personal data

• To respond to enquiries and discuss possible work with you.
• To provide services and communicate with clients.
• To operate, protect and troubleshoot the website.
• To meet legal, accounting or regulatory obligations.

4. Legal bases

Depending on the situation, we process personal data because it is necessary to take steps at your request before entering into a contract, to perform a contract, to comply with a legal obligation, or for our legitimate interests in responding to enquiries and keeping the website secure.

5. Cookies and external services

We do not currently use marketing or analytics cookies. The website uses hosting and security infrastructure provided through ChatGPT Sites.

6. Who may receive personal data

We may share personal data with service providers that support website hosting, security, email and business operations. We may also disclose information where required by law or to protect legal rights. We do not sell personal data.

7. International transfers

Some service providers may process data outside the European Economic Area. Where required, the transfer is protected using an applicable legal safeguard, such as an adequacy decision or standard contractual clauses.

8. How long we keep information

We keep enquiry information only for as long as needed to respond, assess possible work, maintain relevant business records and meet legal obligations. The exact period depends on whether the enquiry becomes a client relationship and whether a legal retention period applies.

9. Your rights

Depending on the circumstances, you may have the right to request access, correction, deletion, restriction or portability of your personal data, and to object to certain processing. Where processing is based on consent, you may withdraw that consent at any time.

To exercise a right, email us. You may also submit a complaint to Portugal's data protection authority, the Comissão Nacional de Proteção de Dados.

10. Changes to this policy

We may update this policy when the website, our services or applicable requirements change. The latest version will always show its update date at the top of this page.