Privacy Policy — Startupack

1. Who we are

This site is operated by ExclusivePixel Ltd., a company registered in Portugal under registration number 515016853, VAT PT515016853, with its head office at Rua José dos Santos Pereira 12, [PLACEHOLDER 0000-000] Lisbon, Portugal (“Startupack”, “we”, “us”).

For any question about your personal data, contact us at team@startupack.biz.

2. What data we collect

We only collect the personal data you provide directly:

Contact form & quote requests: name, email, company name, and the details you include in your message or project brief.
Newsletter: email address only.
Technical logs: when you visit the site, our hosting provider (Vercel) receives your IP address, browser type, and pages visited as part of standard server logs.

3. Why we collect it (legal basis)

To respond to your enquiry — legal basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)).
To send the newsletter — legal basis: your explicit consent (GDPR Art. 6(1)(a)), which you can withdraw at any time using the unsubscribe link.
To secure and improve the site — legal basis: our legitimate interest in operating a secure service (GDPR Art. 6(1)(f)).

4. How long we keep it

Enquiry data: kept for as long as necessary to answer your question and follow up, and then archived for up to 24 months in case you return.
Newsletter data: kept until you unsubscribe.
Client project data (once you become a client): kept for the duration of the engagement plus the statutory retention period required by Portuguese tax and accounting law (typically 10 years for invoicing records).
Server logs: kept by our hosting provider for a rolling window of no more than 30 days.

5. Who we share it with

We do not sell your data. We share it only with service providers who help us run the business, and only to the extent needed:

Vercel (hosting — United States, EU-U.S. Data Privacy Framework certified)
Google Firebase / Firestore (form submissions storage — EU region where possible)
Email delivery, payment processing, and accounting tools used to run our operations

Any transfer of personal data outside the EEA is covered by Standard Contractual Clauses or equivalent safeguards.

6. Your rights under GDPR

You have the right to:

Access the personal data we hold about you
Have inaccurate data corrected
Have your data deleted (subject to legal retention)
Restrict or object to processing
Receive your data in a portable format
Withdraw consent at any time (for consent-based use)

To exercise any of these rights, email team@startupack.biz. We aim to respond within 30 days.

7. Cookies

See our Cookie Policy for details on the cookies we use.

8. Filing a complaint

If you are not satisfied with how we handle your data, you can lodge a complaint with the Portuguese data protection authority (CNPD — cnpd.pt).

9. Changes to this policy

We may update this policy from time to time. When we do, we'll update the “last updated” date at the top. Material changes will be communicated by email where possible.

1. Who we are

For any question about your personal data, contact us at team@startupack.biz.

2. What data we collect

We only collect the personal data you provide directly:

Contact form & quote requests: name, email, company name, and the details you include in your message or project brief.

Newsletter: email address only.

Technical logs: when you visit the site, our hosting provider (Vercel) receives your IP address, browser type, and pages visited as part of standard server logs.

3. Why we collect it (legal basis)

To respond to your enquiry — legal basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)).

To send the newsletter — legal basis: your explicit consent (GDPR Art. 6(1)(a)), which you can withdraw at any time using the unsubscribe link.

To secure and improve the site — legal basis: our legitimate interest in operating a secure service (GDPR Art. 6(1)(f)).

4. How long we keep it

Enquiry data: kept for as long as necessary to answer your question and follow up, and then archived for up to 24 months in case you return.

Newsletter data: kept until you unsubscribe.

Client project data (once you become a client): kept for the duration of the engagement plus the statutory retention period required by Portuguese tax and accounting law (typically 10 years for invoicing records).

Server logs: kept by our hosting provider for a rolling window of no more than 30 days.

5. Who we share it with

We do not sell your data. We share it only with service providers who help us run the business, and only to the extent needed:

Vercel (hosting — United States, EU-U.S. Data Privacy Framework certified)

Google Firebase / Firestore (form submissions storage — EU region where possible)

Email delivery, payment processing, and accounting tools used to run our operations

Any transfer of personal data outside the EEA is covered by Standard Contractual Clauses or equivalent safeguards.

6. Your rights under GDPR

You have the right to:

Access the personal data we hold about you

Have inaccurate data corrected

Have your data deleted (subject to legal retention)

Restrict or object to processing

Receive your data in a portable format

Withdraw consent at any time (for consent-based use)

To exercise any of these rights, email team@startupack.biz. We aim to respond within 30 days.