Privacy Policy

1. Data Controller

Mac Cormack, Unipessoal LDA (trading as Obsidis), NIF PT519109511, Rua Faria de Guimarães 695 - 3, 4200-077 Porto, Portugal. Contact: hello@obsidis.tech.

2. What we collect

When you use our contact form, we collect: name, email address, project type, and the message you send. We do not use cookies or third-party analytics on this site.

3. Why we collect it

To respond to your inquiry, prepare proposals, and (with your continued contact) carry out a contractual relationship. Legal basis under GDPR Art. 6: consent (Art. 6(1)(a)) and steps prior to entering into a contract (Art. 6(1)(b)).

4. How long we keep it

Inquiry data is retained for up to 24 months from last contact. If we sign a contract, project records are retained for the legally required period (10 years for accounting purposes under Portuguese law).

5. Sharing

We do not sell or share your data. We use the following processors strictly to operate the site and respond to inquiries:

• Cloudflare Workers (form processing) - data in transit only
• Monday.com (CRM for inquiries) - EU-hosted
• Email infrastructure for replying to your message

6. Your rights

Under GDPR you have the right to access, rectify, erase, restrict, or port your data, and to withdraw consent at any time. Email hello@obsidis.tech and we will respond within 30 days. You may also lodge a complaint with the Portuguese supervisory authority, CNPD.

7. Security

Data is transmitted over HTTPS. Access is restricted to the company's owner and authorised collaborators bound by confidentiality.

8. Changes

We may update this policy. Material changes will be reflected by updating the date above.