Legal
Privacy Notice
How Caudalempoderado collects, uses and protects your personal data — in full compliance with the EU General Data Protection Regulation (GDPR).
Last updated: 12 June 2026
1. Data Controller
The data controller responsible for your personal data is Caudalempoderado, with offices at Rua Lauro Gonçalves, 12, Santa Comba Dão, Portugal. You can contact us at privacy@caudalempoderado.pt or by phone at +351 938 496 330.
2. Personal Data We Collect
- Identity and contact data (name, business name, email, phone).
- Communications (messages submitted via forms, email or phone).
- Technical data (IP address, device, browser, pages visited).
- Marketing preferences and consent records.
- Commercial data when you become a client (invoices, billing data).
3. Purposes of Processing
- Respond to enquiries and provide consultations.
- Deliver our marketing services and manage client relationships.
- Send service updates and, with your consent, marketing communications.
- Improve our website, content and services.
- Comply with legal, tax and accounting obligations under Portuguese law.
4. Legal Basis for Processing
- Consent (Art. 6(1)(a) GDPR) — newsletters, optional cookies.
- Contract (Art. 6(1)(b) GDPR) — delivering requested services.
- Legal obligation (Art. 6(1)(c) GDPR) — invoicing and tax records.
- Legitimate interest (Art. 6(1)(f) GDPR) — site security and improvement.
5. Cookies and Analytics
We use strictly necessary cookies to operate this website and, with your consent, analytics cookies (such as Google Analytics) to understand usage. You can manage or withdraw consent at any time via your browser settings or our cookie banner.
6. Marketing Communications
We only send marketing emails to recipients who have opted in or who are existing clients receiving information about similar services. Every email contains a one-click unsubscribe link. You can withdraw consent at any time.
7. Third-Party Services
We share data with carefully selected processors who help us operate our business: hosting providers, analytics platforms (Google Analytics), advertising platforms (Google, Meta), email service providers, payment processors and accounting tools. All processors are bound by data processing agreements and EU-compliant safeguards.
8. International Data Transfers
When data is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses or other adequate safeguards required by the GDPR.
9. Data Retention
- Enquiry data: up to 24 months after last contact.
- Client data: for the duration of the contract and up to 10 years after, as required by Portuguese tax law.
- Marketing data: until consent is withdrawn.
- Analytics: up to 14 months.
10. Your Rights under the GDPR
- Right of access, rectification and erasure.
- Right to restrict or object to processing.
- Right to data portability.
- Right to withdraw consent at any time.
- Right to lodge a complaint with a supervisory authority.
To exercise any of these rights, email privacy@caudalempoderado.pt. We respond within 30 days.
11. Complaints
You have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados — CNPD), at Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, or via www.cnpd.pt.
12. Contact
For privacy questions: privacy@caudalempoderado.pt · +351 938 496 330.