Privacy and cookie policy

1. Who is responsible for your data

Rita Galante, a self-employed professional working under the Galante Labs brand.

Email

info@galantelabs.com

2. What data I collect

I collect the data you send me and the technical data that the site’s hosting records, such as your IP address:

• Through the contact form: name, email, brand or website, current platform, the service you want, expected budget, timeline and the message you write.
• By email: what you write to me and any files you send.
• If you’re a client: your billing details and the access to your store or website that you give me for the work.

The fields marked on the form are needed to reply to your request. Without them I can’t prepare a proposal.

3. What for, and on what legal basis

What for	Legal basis (GDPR)
Replying to your request, carrying out the audit and preparing a proposal	Pre-contractual steps at your request (Art. 6(1)(b) GDPR)
Carrying out the contracted project	Performance of a contract (Art. 6(1)(b) GDPR)
Issuing invoices and meeting tax obligations	Legal obligation (Art. 6(1)(c) GDPR)
Keeping records to meet legal obligations or defend legal claims	Legitimate interest (Art. 6(1)(f) GDPR)
Counting visits to the site, without cookies and without identifying visitors	Legitimate interest (Art. 6(1)(f) GDPR)

I don’t send newsletters or advertising without your consent, I don’t sell data to anyone and I don’t make automated decisions about you.

4. How long

• Requests that didn’t become a project: 12 months after the last contact.
• Clients: for the duration of the project and any maintenance, and afterwards for as long as needed to meet legal obligations or defend legal claims.
• Invoices: 10 years, as required by Portuguese tax law.

5. Who I share it with

Only with the services I need to do my work, which process the data on my behalf:

• Email: Zoho Mail
• Website hosting and visit statistics: Cloudflare
• Form submissions: Cloudflare Workers, which deliver the message to my email (Zoho Mail)
• Invoicing: Portal das Finanças (the Portuguese Tax Authority), as tax law requires

If any of these services stores data outside the European Union, this is done on the basis of a European Commission adequacy decision (for example, the EU-US Data Privacy Framework) or standard contractual clauses.

6. Your rights

You can ask me at any time to:

• see the data I hold about you
• correct it
• delete it
• restrict or object to its use
• receive it in a format you can take elsewhere
• withdraw any consent you have given

Just write to info@galantelabs.com. I reply within one month. If you feel your data isn’t being handled properly, you can also lodge a complaint with the CNPD, Portugal’s data protection authority.

7. Cookies

This site uses no advertising or analytics cookies, so it doesn’t ask for your consent to cookies.

To see how many people visit the site and which pages are viewed most, I use Cloudflare Web Analytics. It works without cookies, stores nothing in your browser and doesn’t identify visitors.

8. Changes

If this policy changes, the new version will be published on this page, with the update date at the top.