Privacy Policy

Data controller: BUILD CONSENSUS - LDA (NIPC 519608879, address Caminho da Pedra Nossa Senhora, n.º 47, 9350-053 Campanário, Madeira, Portugal, email info@handymadeira.com)

For any question about your personal data, write to us at info@handymadeira.com. We will reply within one month.

• When you request a quote: your name, email address, phone/WhatsApp number, preferred language, the service you need, property type, municipality, preferred timing, your description of the job and any photos you upload.
• When you contact us by email, phone or WhatsApp: the content of your messages and your contact details.
• When we carry out work for you: the address of the property, invoicing details (such as your NIF) and the details of the work done.
• Technical data: when you visit the website, our hosting provider automatically records technical information (such as IP address, date and time, page requested and browser type) in server logs for security and operation.

We do not use analytics, advertising or tracking tools, and we do not create profiles.

• To answer your request and prepare a quote.
• To plan, carry out and invoice the work you order.
• To meet our legal obligations (invoicing, accounting, tax).
• To keep the website and our systems secure and protect them from spam and misuse.
• To establish, exercise or defend legal claims.

• Steps taken at your request before entering into a contract, and the performance of the contract (Art. 6(1)(b) GDPR) — quote requests, communication and the work itself.
• Legal obligations (Art. 6(1)(c) GDPR) — invoicing and keeping accounting records.
• Our legitimate interests (Art. 6(1)(f) GDPR) — website security, spam protection and defending legal claims.

Please only upload photos that are needed for the quote and avoid showing people or personal documents in them.

• Quote requests that do not lead to a job: deleted at the latest 12 months after our last contact with you.
• Customer and job data: for the duration of the contract and the statutory warranty period.
• Invoices and accounting records: 10 years, as required by Portuguese tax law.
• Server logs: kept by the hosting provider for a short period only.

We only share your data with service providers we need to run our business, under data processing agreements:

• Our certified accountant in Portugal (invoicing and accounting).
• Website hosting and database (Lovable / Supabase) — data stored on servers in the European Union.
• Email services: Zoho (company mailboxes, EU data centre) and Resend (sending the automatic quote emails, EU sending region).
• Cloudflare (domain management, network security).
• Public authorities, only where the law requires it.

Some of these providers are based in the United States. Where data may be transferred outside the EU/EEA, this is protected by an adequacy decision of the European Commission (EU-U.S. Data Privacy Framework) or the European Commission's Standard Contractual Clauses. We never sell your data.

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to data portability. Where processing is based on your consent, you can withdraw it at any time. To exercise your rights, simply write to info@handymadeira.com.

If you believe we have not handled your data correctly, please contact us first. You also have the right to lodge a complaint with the Portuguese data protection authority, CNPD (Comissão Nacional de Proteção de Dados), www.cnpd.pt.