Privacy Policy

1. Who we are

This website is operated by SPYDUCK INTELLIGENCE UNIPESSOAL, LDA, a single-member private limited company (sociedade unipessoal por quotas) registered in Portugal.

• Legal name: SPYDUCK INTELLIGENCE UNIPESSOAL, LDA
• NIPC: 519514300
• Registered office: Oeiras, Lisbon, Portugal
• Email: hello@spyduckhq.com

For the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679, the “GDPR”), SPYDUCK INTELLIGENCE UNIPESSOAL, LDA is the data controller for personal data processed through this website.

2. What personal data we collect

This website is a static informational site. It does not have user accounts, contact forms, comment sections, or newsletter sign-ups. The personal data we process in connection with it is limited to:

• Email correspondence. If you contact us at hello@spyduckhq.com, we receive the personal data you choose to include — typically your name, email address, and the content of your message.
• Technical server logs. Our hosting provider automatically processes technical data such as IP address, browser type, and requested pages in order to deliver the website and protect it against abuse. We do not use this data to identify visitors.

3. Cookies and local storage

This website does not set cookies and does not use any advertising or tracking technologies. The only data stored in your browser is a single theme entry in local storage, which remembers your light/dark mode preference. It contains no personal data, is never transmitted to us or to third parties, and you can remove it at any time by clearing your browser's site data. Because only this strictly functional storage is used, no cookie consent banner is required.

4. Analytics

We do not use any analytics or audience-measurement services on this website — no Google Analytics, no tag managers, no advertising pixels, and no fingerprinting.

5. Legal bases for processing

• Email correspondence: our legitimate interest in responding to your enquiry (Article 6(1)(f) GDPR), or steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).
• Technical server logs: our legitimate interest in operating a secure and reliable website (Article 6(1)(f) GDPR).

6. How long we keep data

• Email correspondence: kept for as long as needed to handle your enquiry and any resulting business relationship, and thereafter only as required by applicable legal, tax, or accounting obligations.
• Technical server logs: retained by our hosting provider for short periods in line with its standard log-retention practices.

7. Processors and recipients

We share personal data only with service providers that help us run this website and our email, acting on our behalf:

• Cloudflare, Inc. — website hosting and content delivery (Cloudflare Pages). Cloudflare may process technical connection data on servers inside and outside the EEA, subject to appropriate safeguards such as the European Commission's Standard Contractual Clauses.
• Email provider — [email hosting provider — to be confirmed by the owner] — processes the messages you send to us.

We do not sell personal data and we do not share it with third parties for their own marketing purposes.

8. Your rights

Under the GDPR you have the right to access, rectify, or erase your personal data; to restrict or object to its processing; to data portability; and to withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with a supervisory authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD, www.cnpd.pt).

9. Privacy requests

To exercise any of your rights or ask questions about this policy, contact us at hello@spyduckhq.com. We will respond within the timeframes required by the GDPR.

10. Changes to this policy

We may update this policy if the website's functionality or our processing activities change. The “Last updated” date above reflects the current version.