Privacy Policy

1. Who we are

codebridgelab is a software engineering studio based at R. do Lima 42, 4200-222 Porto, Portugal ("codebridgelab", "we", "us"). This policy explains what happens to your personal data when you visit codebridgelab.com or contact us, and it applies under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Lei n.º 58/2019, the Portuguese law implementing it.

2. What data we collect

This website does not collect personal data on a server by default. The enquiry form on /contact/ and on each service page composes an email in your own mail client using the details you type in — name, email address, company, phone number, the service and budget band you select, and your message — and that email is sent from your device directly to support@codebridgelab.com. We do not receive or store this information on any server of ours as part of that process.

If you email or call us directly, we receive whatever personal data is in that message or conversation — typically your name, contact details, and the content of your enquiry — and we handle it under the same principles set out in this policy.

Our hosting provider's web server keeps standard technical logs (such as IP address, browser type, and pages requested) for security and operational purposes, for a limited period, as is normal for any website.

The only data stored in your browser by this website is a single record of your cookie preference, described in section 4.

3. Why we collect it and our lawful basis

• To respond to an enquiry you send us: legitimate interest in running our business and, once a contract discussion begins, taking steps toward a contract at your request.
• To deliver a project under a signed engagement: performance of that contract.
• To keep the website secure and working: legitimate interest in the security and proper functioning of our systems (server logs).
• To measure how the site is used, only where you've given consent: consent (see section 4).

We do not use your data for automated decision-making or profiling, and we do not sell personal data to anyone.

4. Cookies and analytics

This site sets one essential storage item — cbl_consent — which records your cookie preference so we don't ask you again on every visit. It is not used to track you and is not shared with anyone.

We use Google Analytics 4 (GA4) to understand how the site is used, but only if you actively consent to it through the cookie banner. GA4's cookies and scripts do not load until you click "Accept all" or enable analytics in "Preferences." If you click "Reject all," no analytics script runs and no analytics cookie is set. You can change your choice at any time using the "Cookie preferences" link in the footer. See our Cookie Policy for the full list of what's set and when.

5. How long we keep it

• Enquiries received by email are kept for as long as reasonably necessary to respond to you and, where a project follows, for the duration of that engagement plus a period required for our accounting and legal obligations.
• Server logs are retained by our hosting provider for a limited, standard operational period and then deleted or anonymised.
• Your cookie preference is kept until you change it or clear your browser storage.
• Analytics data, where you've consented to it, is retained according to the retention settings of our Google Analytics 4 configuration.

6. Who we share it with

We don't sell or rent your personal data. We may share it with:

• Our hosting provider, to the extent necessary to keep the website running.
• Google, as the provider of Google Analytics 4, only where you've consented to analytics cookies.
• Professional advisers (such as an accountant or lawyer) where necessary to run our business, under confidentiality obligations.
• Public authorities, where we're legally required to.

We do not transfer your personal data outside the European Economic Area as part of operating this website.

7. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request erasure of your data, where applicable.
• Restrict or object to certain processing.
• Receive your data in a portable format, where applicable.
• Withdraw consent at any time, for anything based on consent (such as analytics), without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at support@codebridgelab.com. We'll respond within a reasonable time and in any case within the timeframe GDPR requires.

8. Complaints

If you believe we've handled your personal data incorrectly, you can contact us first at support@codebridgelab.com, or lodge a complaint directly with Portugal's data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

9. Changes to this policy

We may update this policy as our practices or the law change. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be reflected here; we encourage you to check back periodically.

10. Contact

Questions about this policy or your data: support@codebridgelab.com, or by post to R. do Lima 42, 4200-222 Porto, Portugal.