Privacy Policy

The controller for data collected on obruno.pt is Bruno Matos, acting as an individual, based in Portugal. For any privacy question, write to info@obruno.pt.

I only collect the data needed to reply to people who contact me and to understand how the site is used. Specifically:

• Data you submit through the contact form: name, email, company (optional), indicative budget (optional) and your message.
• Technical and usage data: pages visited, load times and aggregated performance metrics, through analytics that does not identify you individually.
• Cookies and identifiers, only when active, for measurement and, in the case of campaigns, ad attribution (see the cookies section).

I use contact form data solely to reply to you and follow up, based on your request and my legitimate interest in managing that contact (Article 6 GDPR).

I use analytics data to understand what works on the site and improve it, based on legitimate interest and, where applicable, your consent for non-essential cookies.

I do not use your data for automated decisions or profiling with legal effects on you.

I do not sell or rent personal data. I share the minimum needed with providers that help me run the site, each bound by their own data protection obligations:

• Vercel, which hosts the site and provides usage and performance analytics.
• Resend, which sends the emails generated by the contact form.
• ImprovMX, which forwards email from the @obruno.pt addresses.
• Google and Meta, only when their measurement tags are active, for analytics and campaign attribution, always under Consent Mode.

Some of these providers may process data outside the European Economic Area. Where that happens, the processing relies on mechanisms recognised by the European Commission, such as Standard Contractual Clauses, ensuring an adequate level of protection.

I keep contact messages for as long as needed to reply and maintain a record of the relationship, and delete them when no longer useful. Analytics data is retained in aggregated form for the periods set by each provider. You can request deletion of your data at any time.

The site uses usage and performance analytics that, by default, does not rely on identifying cookies. When Google or Meta tags are active, the site applies Consent Mode: storage for advertising and personalisation starts denied and is only enabled after consent. Analytics storage is used in aggregated form.

You can control or block cookies in your browser settings. Blocking non-essential cookies does not affect access to the site content.

Under the GDPR, you have the right to access your data, correct it, erase it, restrict or object to processing, and request portability. To exercise any of these, write to info@obruno.pt and I will respond as soon as possible.

If you believe your data is not being handled properly, you have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) at www.cnpd.pt.

I may update this policy whenever the site or the providers I use change. The date at the top always indicates the current version. Material changes are reflected here.