- others
Privacy Policy
Last updated: May 2026
This Privacy Policy explains how Saltu (“we”, “us”, or “our”) collects, uses, and protects your personal data when you use our website and contact form. We are committed to processing your data in full compliance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and Lei n.º 58/2019, of 8 August, the Portuguese law implementing the GDPR.
1. Data Controller
Saltu
Porto, Portugal
Email: [email protected]
2. Personal Data We Collect
When you submit our contact form, we collect the following personal data:
| Data | Purpose |
|---|---|
| Full name | To identify who we are speaking with |
| Email address | To respond to your enquiry |
| Subject / inquiry type | To route and handle your request appropriately |
| Message | To understand and respond to your enquiry |
We do not collect any special categories of personal data (e.g. health data, political opinions, biometric data).
3. Legal Basis for Processing
We process your personal data on the following legal bases under Article 6 of the GDPR:
- Consent (Art. 6(1)(a)) — by ticking the checkbox on the contact form, you expressly consent to the processing of your data for the purposes described in this policy.
- Legitimate interests (Art. 6(1)(f)) — to respond to your enquiry and manage our business relationship with you, where our interests are not overridden by your rights and freedoms.
You may withdraw your consent at any time by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
4. How We Use Your Data
We use the data you provide solely to:
- Respond to your enquiry or request
- Follow up on a potential business relationship
- Improve our services based on the nature of the enquiries we receive
We will not use your data for automated decision-making or profiling.
5. Data Sharing and Third-Party Processors
Your form submission is processed by Formspree (Formspree, Inc.), a third-party form processing service. Formspree acts as a data processor on our behalf and is contractually bound to process your data only on our instructions. You can review Formspree’s privacy practices at formspree.io.
We do not sell, rent, or share your personal data with any other third parties for marketing or commercial purposes.
We may disclose your data to competent authorities if required to do so by applicable law or court order.
6. International Transfers
Formspree may process data outside the European Economic Area (EEA). Where such transfers occur, they are governed by Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of protection for your personal data.
7. Data Retention
We retain your personal data only for as long as necessary to respond to your enquiry and for a reasonable period thereafter to manage any follow-up communication, typically no longer than 24 months from the date of submission. After this period, your data will be securely deleted.
8. Your Rights
Under the GDPR and Lei n.º 58/2019, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR) — to obtain confirmation of whether we process your data and to receive a copy of it.
- Right to rectification (Art. 16 GDPR) — to request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17 GDPR) — to request deletion of your data where there is no legitimate ground for its continued processing.
- Right to restriction of processing (Art. 18 GDPR) — to request that we limit the processing of your data in certain circumstances.
- Right to data portability (Art. 20 GDPR) — to receive your data in a structured, commonly used and machine-readable format.
- Right to object (Art. 21 GDPR) — to object to processing based on legitimate interests.
- Right to withdraw consent — to withdraw your consent at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
9. Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Portuguese supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD)
Website: www.cnpd.pt
Address: Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa
Email: [email protected]
10. Cookies and Tracking
Our website uses analytics tracking (Umami) to collect anonymous usage data. This data is not linked to any personal data submitted via the contact form and does not require consent under applicable law as it does not use cookies for tracking purposes.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last updated. We encourage you to review this page periodically.
12. Contact
For any questions, requests, or concerns regarding this Privacy Policy, please contact us:
Saltu
Porto, Portugal
[email protected]