Website Privacy Policy — Furriel
Last updated: 15 October 2026
This is a translation of the Portuguese text. If they differ, the Portuguese version prevails.
This policy explains what personal data Furriel collects through the furriel.pt website, what it uses it for and what your rights are. It does not cover the Furriel application, which has its own Privacy Policy.
1. Controller
The controller of the data collected on this website is Diogo Ribeiro, with address at Rua António Lago Cerqueira, 72, 2.º Esq., 4600-017 Amarante, who can be contacted at ola@furriel.pt.
2. What data we collect
- Contact form: name, email address and the message you write.
- Professionals form: name of the business, type of establishment, email address, telephone number and town.
- Technical data from the forms: date/time of submission and a code calculated from the IP address (a hash with a secret key, which does not reveal the IP address), used to limit the number of submissions. To tell people apart from bots, Cloudflare Turnstile may also process information from your browser (such as the user agent and interaction patterns) and use technical cookies that are necessary for that check.
- Website usage data (only if you accept usage analytics): the pages you visit, clicks on the store buttons, the opening of the professionals form and the submission of a form (only the type, never the content), together with technical browser data (browser and device type, operating system, language, screen size, referring page) and an approximate location (country, region and city) calculated from the IP address, which is not stored. They are linked to a random identifier created in your browser.
- Server logs: for security reasons, the hosting server automatically logs access (IP address, date/time and pages viewed). These logs are only analysed in the event of a security incident.
3. Purposes and legal basis
- Responding to your requests and messages — steps taken at your request prior to entering into a contract and/or your consent (Article 6(1)(b) and (a) GDPR).
- Preventing spam, fraud and abuse of the forms — legitimate interest in keeping the website secure (Article 6(1)(f)).
- Measuring website usage, on an aggregated basis, in order to improve it — your consent (Article 6(1)(a)), given in the cookie notice, which you can withdraw at any time.
4. Cookies
The website uses technical cookies, which are necessary to store your choice about cookies and for the anti-bot check on the forms, and, only with your consent, usage analytics cookies (PostHog). The details, and how to change your choice, are in the Cookie Policy.
5. Who we share data with
We do not sell your data. We use providers that process it on our behalf:
- PTISP — website hosting (servers in Portugal).
- Supabase — database where contact messages and professionals’ requests are stored (servers in the European Union, in Ireland).
- Cloudflare — anti-bot check (Turnstile) on the forms.
- PostHog — subject to consent, website usage analytics (servers in the European Union, in Frankfurt).
These providers act as processors under Article 28 GDPR.
6. International transfers
Cloudflare may process data outside the European Economic Area. In such cases, transfers are made under mechanisms provided for in the GDPR, such as the European Commission’s standard contractual clauses.
7. How long we keep data
- Contact messages and professionals’ requests: for as long as necessary to respond and follow up, up to a maximum of 12 months, after which they are deleted automatically.
- The code calculated from the IP address is kept with the message or request and is deleted with it.
- Website usage data: kept by PostHog for up to 7 years, the period of the contracted plan, linked only to the random identifier of your browser. If you decline or withdraw consent, we stop collecting it.
8. Your rights
You can request access to, rectification, erasure, restriction or portability of your data, object to processing and withdraw your consent at any time (without affecting what has already been done on the basis of it). To exercise these rights, write to ola@furriel.pt. You also have the right to lodge a complaint with the supervisory authority, the CNPD (Comissão Nacional de Proteção de Dados).
9. Security
We use an encrypted connection (HTTPS) and reasonable technical and organisational measures to protect data. The credentials and secrets of the forms are kept only on the server, never in the browser. The website only loads third-party resources in two cases: the anti-bot check, when a form appears on screen, and usage analytics, after you accept it.
10. Minors
The website is not aimed at children under 16 and we do not knowingly collect their data. If we become aware that we have received data from a minor without authorisation, we delete it.
11. Changes to this policy
We may update this policy. The version in force is the one published on this page, with the date of update at the top.
12. Contact
For any question about privacy, write to ola@furriel.pt.