Contact

Privacy Policy

Last updated: July 8, 2026

This Privacy Policy explains how Álvaro Ortega Escot ("I", "me", "my") collects, uses, and protects your personal data when you visit alvaroortegaescot.com or contact me through the website.

I take your privacy seriously. I only collect the minimum data needed to respond to you and provide my services.

1. Who I am (Data Controller)

I operate as an independent freelance professional (trabalhador independente) registered in Portugal.

2. What data I collect

Data you provide voluntarily (contact form)

When you use the contact form on this website, I collect:

  • Name (required)
  • Email (required)
  • Website URL (optional)
  • Service interest (required)
  • Message content (optional)

Data collected automatically

  • Technical logs from the hosting provider (Cloudflare Pages): IP address, browser type, timestamps. Used only for security and to serve the website. Not linked to your identity.
  • Analytics (Cloudflare Web Analytics): aggregate, anonymous visit data. No cookies. No personal tracking.

I do NOT use:

  • Google Analytics
  • Advertising cookies
  • Retargeting pixels
  • Third-party marketing cookies

3. How I use your data

Your data is used ONLY for these purposes:

  • To respond to your contact form submission
  • To provide the services you have requested
  • To fulfill legal obligations (invoicing, tax records)
  • To improve the website (aggregate analytics only)

I will never:

  • Sell your data to third parties
  • Send you marketing emails without your explicit consent
  • Share your information with anyone not directly involved in the service

4. Legal basis for processing (GDPR Article 6)

  • Consent (Art. 6.1.a): when you submit the contact form
  • Contract performance (Art. 6.1.b): when we work together as client and provider
  • Legal obligation (Art. 6.1.c): for invoicing and tax records in Portugal
  • Legitimate interest (Art. 6.1.f): for basic website analytics and security logs

5. Third-party processors

To operate this website and respond to you, I use these services:

These providers are contractually bound to protect your data under EU standards.

6. Data retention

  • Contact form submissions: kept for up to 24 months, unless we start a professional relationship (in which case they're kept as long as legally required for tax records — 10 years in Portugal)
  • Technical logs: kept for up to 30 days
  • Aggregate analytics: kept indefinitely (cannot identify you)

7. International data transfers

Some processors (Cloudflare, Web3Forms) may process data outside the European Union. When this happens, it's done under EU-approved safeguards such as Standard Contractual Clauses (SCCs).

8. Your rights under GDPR

You have the right to:

  • Access your personal data
  • Rectify incorrect data
  • Erase your data (right to be forgotten)
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent at any time
  • File a complaint with the Portuguese Data Protection Authority (CNPD): cnpd.pt

To exercise any of these rights, email me at hello@alvaroortegaescot.com. I will respond within 30 days.

9. Security

I take reasonable technical and organizational measures to protect your data:

  • HTTPS-only communications
  • Data stored in secure, GDPR-compliant infrastructure
  • Access to your data limited to me only
  • No unnecessary data collection

10. Children

This website is not directed to children under 16. I do not knowingly collect data from minors.

11. Changes to this policy

I may update this Privacy Policy from time to time. The date at the top of the page will always reflect the last update. Substantial changes will be highlighted here.

12. Contact

For any questions about privacy or data protection: