Privacy & cookies
How we handle your data.
This policy explains what data we collect on dfaro.pt, why, for how long, and how you can exercise your rights.
1. Who is responsible
Douglas Gonçalves – Unipessoal, Lda. (D'Faro Business Center), Portuguese company number 518794300, registered at Rua Infante Dom Henrique, 111, 8000-363 Faro, Portugal. For any question about personal data: info@dfaro.pt.
2. What we collect and why
Contact form
When you send the form, we collect your name, phone or email, the service you are interested in, your message, the language, the page you sent it from and your IP address. We use this data solely to reply to your enquiry and prepare a quote. The legal basis is the taking of pre-contractual steps at your request and our legitimate interest in replying to those who contact us. The data is emailed to info@dfaro.pt and kept in an internal log on our server.
WhatsApp, email and phone
When you click a WhatsApp button you are taken to Meta Platforms' application; from then on the WhatsApp privacy policy applies. Data you send us by WhatsApp, email or phone is used to reply to your enquiry.
Clients
If you contract a service, the data needed for the contract (identification, tax number, address, billing details) is processed to perform the contract and to comply with legal, tax and accounting obligations, and is kept for the periods the law requires.
3. For how long
- Enquiries that do not lead to a contract: 12 months after the last contact.
- Client data: for the duration of the contract and afterwards for the applicable legal periods (as a rule, 10 years for tax and accounting documents).
- Technical server logs (IP, date, page): up to 12 months, for security and abuse detection.
4. Who we share it with
We do not sell or pass on personal data. We use providers that process data on our behalf: website and email hosting (Dominios.pt, Portugal), Google (Analytics, Ads and Maps — only with your consent, see section 5) and Meta (WhatsApp, when you contact us that way). Google may transfer data outside the European Economic Area under the EU-US Data Privacy Framework and standard contractual clauses. Where a contracted service involves a specialist partner (for instance, company formation), the strictly necessary data is shared with that partner, and we say so in the quote.
5. Cookies and measurement
By default the site does not set measurement or advertising cookies. It only does so after you click "Accept" in the banner. If you decline, Google Analytics and Google Ads run in cookieless mode, with no individual identifiers. The Google map only loads when you click "Show the map" or after you accept cookies.
| Name | Source | Purpose | Duration | When |
|---|---|---|---|---|
| df_consent | D'Faro (local storage) | Stores your choice in the cookie banner (accept/decline). | Until deleted by you | Necessary |
| _ga | Google Analytics | Distinguishes visitors for site-usage statistics. | 2 years | With consent only |
| _ga_XKJRE9K6T3 | Google Analytics | Keeps the state of the visit session. | 2 years | With consent only |
| _gcl_au | Google Ads | Measures conversions from Google ads. | 3 months | With consent only |
| NID, CONSENT and others from google.com | Google Maps | Set by Google when you load the location map. | Up to 6 months | Only when the map is loaded |
You can change your choice at any time via the Manage cookies link in the footer of every page, or by deleting cookies in your browser.
6. Your rights
You have the right to access your data, to have it corrected, to ask for its deletion, to restrict or object to its processing, and to the portability of the data you gave us. To exercise any of these rights, write to info@dfaro.pt; we reply within one month at most. If you believe your rights have not been respected, you may lodge a complaint with the Portuguese data protection authority, CNPD (cnpd.pt).
7. Security
The site is served exclusively over HTTPS, with security headers enabled. The form is protected against automated submissions and rate-limited per address. Internal logs are kept in a server area not accessible to the public.
8. Changes
This policy may be updated when the site or the services change. The date of the latest update is shown below.
Last updated: 28 September 2026.