Privacy notice

What I collect, and why.

Short version: if you send me a brief, I store what you typed so I can reply and keep track of the conversation. I don’t sell it, share it or use it for anything else.

Last updated: 8 September 2026

Who I am
What I collect
Why
How long
Who else sees it
Your rights
Cookies

Who I am

This site belongs to Edilander Tôrres, a self-employed web engineer and designer based in Braga, Portugal. For data protection purposes, I’m the controller of the personal data described here. You can reach me at hello@edilandertorres.com.

What I collect

Only what you type into a form, plus the minimum context needed to answer it.

Data	Where it comes from	Required?
Name	You type it	Yes
Email address	You type it	Yes
Phone number	You type it	No
Company	You type it	No
Service, budget, timing	You select them	Partly
Your message	You type it	Yes
Page you submitted from	Recorded automatically	—
Campaign tags (UTM)	From the link you arrived on, if any	—
A one-way hash of your IP address	Recorded automatically, to rate-limit spam	—

The IP address is hashed, not stored in readable form, and is used only to stop the same source flooding the form. Nothing here involves automated decision-making or profiling.

Why I collect it

To answer you. Legal basis: your consent, given by ticking the box on the form, and the steps taken at your request before entering a contract.
To keep track of the conversation. Enquiries are stored in my own CRM, which runs on this site’s server rather than a third-party service.
To keep the form usable. The hashed IP and the honeypot field exist to block automated spam.

I do not send marketing email, and I do not add you to a list.

How long I keep it

Enquiries that do not become projects: up to 24 months, then deleted.
Client records: for the duration of the project and as long afterwards as invoicing and tax rules require.
Security and audit logs: 12 months.

You can ask me to delete your data sooner. See below.

Who else sees it

Nobody buys it, and nobody is given it for their own purposes. It is processed on my behalf by the providers that keep this site running:

Web hosting: stores the site and its database, inside the EU.
Email delivery: sends the notification that your enquiry arrived, and my reply.
Google: analytics and Search Console, where enabled, for aggregate traffic measurement.

If you contact me over WhatsApp instead of the form, that conversation is subject to WhatsApp’s own terms and privacy policy, not this notice.

Your rights

Under the GDPR you can ask me to:

tell you what I hold about you, and give you a copy;
correct anything that is wrong;
delete it;
restrict or object to how it is used;
send it to you, or to someone else, in a portable format;
withdraw your consent at any time, which does not affect anything already done under it.

Email hello@edilandertorres.com and I’ll act within 30 days. If you are not satisfied, you can complain to the Portuguese supervisory authority, the CNPD.

The typefaces are served from this site, not from a font CDN, so loading a page does not tell any third party that you visited it.

Cookies

This site sets no advertising or tracking cookies of its own. WordPress may set a session cookie if you log in to the administration area, and analytics cookies are only set where analytics is enabled and you have accepted them. Your browser settings can block or delete all of these at any time.

Changes

If this notice changes, the date at the top changes with it. Material changes affecting data already collected will be communicated directly.

Contact Back to home