Privacy policy

This policy explains what personal data we collect on ParedeCerta.pt, what we use it for, how long we keep it and what rights you have. We write in plain words. If anything is unclear, ask us.

Last updated: 3 November 2026.

Who is responsible for your data

The controller is Dynamic Flower Unipessoal LDA., registered at Rua Largo Alberto Sampaio 3, 2795-007 Linda-a-Velha, Portugal.

Contact for any question about personal data: [email protected].

ParedeCerta.pt is an information website. We do not do painting or building work. We explain the subject and receive the requests people send us.

What data we collect

We only collect data when you fill in a form.

• Wall form and contact request: name, phone number and town.
• Room description: if you use the calculator before sending the form, we store with the request what you entered (type of room, approximate sizes, number of windows and doors, number of coats, whether the ceiling is included, the colour you chose and what you see on the wall, for example “damp”, “mould” or “salt”) and the calculated area and litres, so that our reply is more useful.
• Company details (partner form): company name, area where you work, phone and email.
• Anti-robot check: the forms use Cloudflare Turnstile to confirm that a person is sending them. Cloudflare may process the IP address and browser data for that check, and we do not use them for any other purpose.
• Technical data of the request: the page where you filled in the form and the type of browser. The IP address is not stored; we only keep an irreversible fingerprint of it, used to stop abuse and automated requests.

We do not ask for or store payment details. We do not collect sensitive data.

What we use the data for and on what basis

Purpose	Legal basis
Read your request and contact you by phone about painting or damp in your home	Your consent (Article 6(1)(a) GDPR), given by ticking the box on the form
Contact companies that sent the partner form	Your consent (Article 6(1)(a)) and pre-contractual steps (Article 6(1)(b))
Reply to messages sent through the contact form	Pre-contractual steps and legitimate interest (Article 6(1)(b) and (f))
Protect the site against abuse and automated requests	Legitimate interest (Article 6(1)(f))

We do not use your data for automated decisions or profiling.

Who we share the data with

At the moment we do not forward requests to painters or building companies. The request stays with us. If that changes, we will only do it with a new, express consent that says who the data is sent to, and this policy will be updated first.

Who receives the data:

• Providers that help us run the site: server hosting, bot protection (Cloudflare) and an email delivery service (Brevo, a company based in the European Union), which process data only on our behalf.
• Telegram: we receive a notice of each new request (name, phone, town and what you described) in a private chat on the Telegram messaging service, so that we can reply quickly. Telegram may process this data outside the European Union.
• Authorities, when the law requires us to.

We do not sell your data to advertisers and we do not use it for advertising.

How long we keep the data

We keep requests for 12 months from the request. After that we delete or anonymise them. You can ask for earlier deletion (see below).

Your rights

At any time you can:

• find out what data we hold about you and ask for a copy;
• correct wrong data;
• ask for the data to be deleted;
• ask us to restrict the processing or object to it;
• receive your data in a commonly used format (portability);
• withdraw your consent. This does not affect processing done before the withdrawal.

To exercise any right, write to [email protected]. We reply within one month.

If you think your data was not handled properly, you can complain to the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese data protection authority: www.cnpd.pt.

Cookies

The site measures visits with Google Analytics (Google Ireland Limited). For visitors in the European Union, the European Economic Area, the United Kingdom and Switzerland, we only switch it on if you accept in the cookie notice. Google may process data outside the European Union, with the safeguards it offers for those transfers. We do not use advertising cookies. See the Cookie policy.

Security

The site uses an encrypted connection (HTTPS). Access to the requests we receive is restricted to authorised people and protected by a password.

Children

The site is not meant for children under 16 and we do not knowingly collect data from children.

Changes to this policy

We may update this policy. The date of the last update is always at the top of the page.