Privacy
Who is responsible
Bruno da Silva Ponce Leão is responsible for the personal information covered by this notice. ShieldStack Accessibility is operated from the following address.
Rua João Infante 130, LT 8, 7A
2705-384 Cascais, Portugal
For questions about your personal information or to exercise your privacy rights, email hello@shieldstack.pro.
Information you provide
When you contact us through the form, we ask for your name, email address, Store website, and the reason for your request. These details are required to submit the form.
You may also provide a description, relevant page links, and information about whether your Store has had an Accessibility Audit before. If you contact us by email, we receive your email address and the information you include in your message.
To operate and protect the form, we also keep a request reference, technical dates, delivery status, and reduced identifiers used to prevent abuse. We do not store your IP address in plain text.
Please do not include passwords, payment details, or personal information about your Store's customers.
Why we use your information
We use your information to understand and respond to your request, discuss our Accessibility Solution, and prepare a proposal where appropriate.
When you ask us to take steps toward a contract with you, we process the information needed for those steps. For general inquiries or when you contact us on behalf of a business, we rely on our legitimate interest in responding to business inquiries and managing those discussions, taking your rights and expectations into account.
We may also process information when required by law or when necessary to establish, exercise, or defend legal claims.
Staying in touch
If you have expressed interest but postponed a decision, we may agree with you to get back in touch once after six months. We rely on your consent for that contact. You can withdraw it at any time by emailing us. Withdrawing your consent does not affect the lawfulness of processing before the withdrawal.
Submitting the form does not subscribe you to marketing campaigns.
How long we keep your information
For inquiries that do not lead to a contract, we keep your information for 12 months after our last meaningful exchange, then delete it. A message we send after six months does not restart that period if you do not reply.
If you become a Client, we keep contract, billing, and service records during the work and for the periods required by tax, accounting, and other applicable law. We may also retain records for as long as necessary to establish, exercise, or defend legal claims. The period depends on the type of record and the applicable obligation.
Operational records are kept for 30 days. Technical counters used to prevent abuse are kept for 2 days.
When information is due for deletion, we remove it from the active database and review the related email copies in Google Workspace and authorised devices. Residual copies may remain temporarily in Hostinger backups until the provider's normal backup cycle ends.
We use Google Workspace to receive and manage email correspondence.
Service providers and international transfers
We use Hostinger to host this website and store form submissions. We use Google Workspace to send and manage email. These providers may use subprocessors to provide their services.
Where these services involve processing personal information outside the European Economic Area, the providers use recognised legal safeguards, including adequacy decisions and Standard Contractual Clauses where applicable. You may contact us for more information about these safeguards.
Cookies
This website uses only technical session cookies needed for security and for the contact form to work. We do not use cookies for advertising or analytics.
Your rights
Depending on the applicable conditions, you may ask to access, correct, or delete your personal information, restrict its use, or receive it in a portable format. You may also object to processing based on legitimate interests.
To make a request, email hello@shieldstack.pro.
Requests are handled free of charge and answered within one month. If a request is complex, we may extend this period by up to two further months and will explain the extension within the first month. We ask for additional information to confirm your identity only when we have reasonable doubts.
You also have the right to lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados, or another competent supervisory authority.