How we handle your data.

Who is responsible for your data

The data controller is BOATS (Based on a True Story), a project run by its partners Rafael Borracha and Ricardo Dias, based in Lisbon, Portugal.

For anything to do with your data, write to us at contacto@boatsdigital.pt. You'll hear back from us directly.

What data we collect

We only collect personal data when you decide to get in touch:

• Through the contact forms (the letter on the contact page and the messages about packages and plans): your name, your business, your message and the email address or phone number you give us. To reply, we only need a way to contact you and, in the letter, your name.
• With each message we also record the page and language you sent it from and, where relevant, the package or plan you're writing about.
• By email, phone or WhatsApp: if you contact us directly, we receive your email address or phone number and whatever you tell us.

When you visit the site, the company that hosts it processes the technical data needed to show you the pages, such as your IP address and browser type. The visitor statistics we see are aggregated and cookieless: they show totals, not people.

What we use your data for, and on what legal basis

• Replying to your request and, if you want to go ahead, preparing a proposal. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
• Answering general questions and following up on the conversation, keeping a record of what we discussed. Legal basis: our legitimate interest in replying to people who contact us (Article 6(1)(f) GDPR).
• Keeping the site running, protecting it from spam and understanding, in aggregate, how it is used. Legal basis: our legitimate interest (Article 6(1)(f) GDPR).

We don't use your data for advertising, we don't sell it, and we don't make automated decisions or build profiles about you.

You don't have to give us any personal data. Without a way to contact you, though, we can't reply.

How long we keep your data

We keep messages until your request is resolved and for no more than 24 months after our last contact with you. After that, we delete them.

If the conversation leads to a contract, the data becomes part of it and the retention periods required by law apply, for example for tax purposes.

Who processes data on our behalf

We work with only a few providers, the ones the site needs to run. They process data on our behalf and only for the purposes described in this policy:

• Vercel Inc.: hosting the site, sending the forms and aggregated, cookieless visitor statistics (Vercel Web Analytics).
• Resend: delivering the messages you send through the forms to our inbox by email.

If you choose to talk to us on WhatsApp, that conversation is processed by WhatsApp (Meta) under its own terms and privacy policy.

Transfers outside the European Union

Vercel and Resend may process data in the United States. These transfers are covered by the EU–US Data Privacy Framework and/or by Standard Contractual Clauses approved by the European Commission.

Cookies

This site doesn't use tracking or advertising cookies, which is why you don't see a cookie notice. Visitor statistics work without cookies, and the fonts are hosted on the site itself, with no requests to Google.

Links to WhatsApp, the Complaints Book and other websites take you away from boatsdigital.pt. Those sites’ own privacy policies apply there.

Your rights

At any time, you can ask us to:

• give you access to the data we hold about you;
• correct data that is wrong or incomplete;
• delete your data;
• restrict how we process your data;
• stop processing based on our legitimate interest (the right to object);
• give you your data in a structured, commonly used format (portability);
• withdraw your consent, where processing is based on it, without affecting anything done before.

To exercise any of these rights, write to us at contacto@boatsdigital.pt. It's free, and we'll reply within one month at the latest. Before we hand over or delete any data, we may ask you to confirm it's really you.

If you think we haven't handled your data properly, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt. We'd appreciate the chance to put it right first.

Complaints Book

For our services in general, you can also file a complaint in the electronic Complaints Book (Livro de Reclamações Eletrónico).

Changes to this policy

If we change how we handle your data, we will update this page and the date at the top.