Privacy Policy

This policy explains how Qubitz, Blockchain And Software Development, Lda (“Qubitz”, “we”, “us”) collects, uses and protects personal data in connection with this website and our services, in line with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and Portuguese Law No. 58/2019.

1. Data controller

The data controller is:

• Qubitz, Blockchain And Software Development, Lda
• NIF: 516946900
• Registered office: Rua Alfredo Allen 455/461, 4200-135 Porto, Portugal
• Contact: [email protected]

2. What data we collect

We collect data you provide directly, plus a limited set of technical data generated automatically:

• Contact and lead data — name, email, company, phone (optional), job role, message content, project type, budget range, timeline. Collected via the contact form, the newsletter sign-up or email correspondence.
• Commercial data — information you share in proposals, statements of work and engagement correspondence.
• Technical data — IP address, device and browser metadata, pages visited, referring URL and aggregated analytics events. Collected automatically when you visit the site. Analytics events (Vercel Analytics + Speed Insights) are only collected after you consent via the cookie banner.
• Consent and preference data — your language selection (qubitz_locale) and your cookie-consent choice (qubitz_consent, plus granular categories in qubitz_consent_categories). These are strictly necessary and stored in first-party cookies; see the Cookie Policy for TTLs and full details.

We do not knowingly collect data from children under 16. We do not process special categories of personal data (Art. 9 GDPR) through this website.

3. Purposes and legal bases

We process personal data for the following purposes, each on the indicated legal basis under Art. 6 GDPR:

• Responding to enquiries and providing services — performance of a contract or steps taken at your request prior to entering into a contract (Art. 6(1)(b)).
• Sending the newsletter — your consent (Art. 6(1)(a)), which you can withdraw at any time via the unsubscribe link in each message or by emailing us.
• Site security, fraud prevention and service improvement — our legitimate interest in protecting and improving the website and services (Art. 6(1)(f)).
• Complying with legal obligations — where required by Portuguese or EU law, for example tax, accounting and record-keeping obligations (Art. 6(1)(c)).

4. How long we keep data

• Enquiries that do not lead to an engagement — up to 24 months from last contact.
• Client records and engagement correspondence — for the duration of the engagement and for 10 years thereafter, to meet Portuguese commercial and tax record-keeping obligations.
• Newsletter subscribers — until you unsubscribe, after which we retain only the fact of the unsubscription to honour your choice.
• Technical logs and analytics — aggregated or anonymised data; any identifiable information is kept for no longer than 14 months.

5. Who receives your data

We do not sell personal data. We share it only with:

• Service providers (processors) acting on our documented instructions, including:
  • hosting and content delivery (Vercel Inc., USA);
  • transactional email (Resend, Inc., USA);
  • product analytics and performance monitoring (Vercel Analytics and Vercel Speed Insights, Vercel Inc., USA) — loaded only after you consent via our cookie banner;
  • accounting and invoicing integrations (e.g. Moloni, Portugal).
• Competent authorities where required by law or to protect our legal rights.

All processors are bound by written agreements that meet the requirements of Art. 28 GDPR. For details on which cookies each processor sets, see our Cookie Policy.

6. International transfers

Some of our processors are located outside the European Economic Area, notably in the United States. When data is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses or other safeguards permitted under Chapter V of the GDPR. A copy of the relevant safeguards can be requested at the contact email below.

7. Your rights

Subject to the conditions set out in the GDPR, you have the right to:

• access the personal data we hold about you;
• ask us to rectify inaccurate or incomplete data;
• ask us to erase data;
• restrict or object to processing;
• data portability;
• withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email [email protected]. We will respond within one month. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or with the supervisory authority of your habitual residence.

8. Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, role-based access controls, audit logging and vendor assessments. No system is perfectly secure, but we continually review and improve our controls.

9. Automated decision-making

We do not make decisions that produce legal or similarly significant effects based solely on automated processing of your personal data.

10. Cookies and consent

On your first visit you are shown a cookie consent banner with three clear options: Accept all, Reject non-essential and Preferences. Strictly necessary cookies (language, consent state) are always on; analytics cookies do not load until you grant consent. You can change your choice at any time via the Cookie preferences link in the site footer or from our Cookie Policy page.

The Cookie Policy lists every cookie, who sets it, what it does, and how long it lasts.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the “Last updated” date above and, where appropriate, communicated by email or a notice on the website.

12. Contact

Questions about this policy or your personal data can be sent to [email protected].