How we handle your data.

// 01

Who we are.

The website beelabs.pt and associated services are operated by Poderoso Código Unipessoal Lda, VAT 517849437, headquartered at Rua Cruz D’Argola, nº 901, 4810-225 Mesão Frio · Guimarães, Portugal.

For any question about how we handle your data, write to geral@beelabs.pt.

// 02

What we collect.

We collect the data strictly necessary to respond to what you ask.

• Free audit request: your site URL, name, email or phone, and a description of what worries you. Submitted via WhatsApp, email or form.
• Direct contact: whatever you write in your email + signature (name, possibly role/company).
• Browsing: the site does not use tracking cookies. If we ever activate analytics, it will be a privacy-first solution without personal identification.

// 03

What we use it for.

• Respond to your audit request and produce the report.
• Communicate with you during the project, if we work together.
• Comply with tax and accounting obligations (invoicing).

We do not use your data for automated marketing, retargeting, or sale to third parties. Ever.

// 04

Legal basis.

We process your data based on your consent (when you submit the form or contact us), contract performance (when we move forward with a project), and legal compliance (invoicing, tax retention).

// 05

How long we keep it.

• Audit request without follow-up: 12 months, then we delete.
• Project communication: for the duration of the project + 2 years after completion.
• Invoicing: 10 years, as required by Portuguese tax law.

// 06

Who we share with.

Your data is handled internally by the team. Subcontractors that may have access (only when necessary): email provider (Google Workspace), hosting provider (Hostinger), payment processor (Stripe or MBWay, where applicable). All bound by GDPR-compliant data processing agreements.

We do not sell data. We do not share with third parties for marketing purposes.

// 07

Your rights.

You have the right to:

• Access the data we hold about you.
• Rectify incorrect data.
• Erasure ("right to be forgotten"), unless legal obligations require retention.
• Restriction of processing.
• Portability: request your data in a structured format.
• Object to processing.
• Withdraw consent at any time, without affecting the lawfulness of previous processing.

To exercise any of these rights, write to geral@beelabs.pt. We respond within 30 days.

If you believe your request has not been handled properly, you can file a complaint with the Portuguese Data Protection Authority (CNPD) at cnpd.pt.

// 08

Cookies and analytics.

We do not use tracking, advertising, or profiling cookies. The site only uses cookies strictly necessary for technical operation (where applicable).

To measure visits and understand what works on the site, we use Plausible Analytics, a privacy-first alternative to Google Analytics. Plausible:

• Does not use cookies.
• Does not log individual IPs or identify visitors.
• Only collects aggregated metrics (visits, sources, page views, time).
• Is hosted in the European Union.
• Is GDPR-compliant by design, no consent banner required.

If we activate additional tools that collect personal data, this policy will be updated and a consent banner will be shown where required by law.

// 09

Changes.

This policy may be updated to reflect changes in the service, in the law, or in the providers we use. The last-updated date appears at the top of the page. Material changes will be communicated to active clients.