Privacy Policy

Last updated: December 28, 2025

1. Introduction

This Privacy Policy explains how Miguel Ângelo Sepúlveda, operating as mxConsulting ("we", "us", or "our"), collects, uses, and protects your personal data when you use our website at https://mxconsulting.net.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Portuguese Law no. 58/2019.

2. Data Controller

The data controller responsible for your personal data is:

  • Name: Miguel Ângelo Sepúlveda
  • Business: mxConsulting
  • Location: Portugal
  • Contact: Via the contact form on this website

3. Data We Collect

3.1 Contact Form Data

When you submit our contact form, we collect:

  • Your name
  • Your email address
  • The subject and content of your message

3.2 Technical Data

For security and spam prevention, we may collect:

  • IP address (for rate limiting purposes only, not stored long-term)
  • Browser type and version
  • Timestamp of form submission

3.3 Data We Do Not Collect

We do not:

  • Create user accounts
  • Use tracking cookies or analytics
  • Collect payment information
  • Process data from minors (users must be at least 13 years old)

4. Purpose and Legal Basis

We process your personal data for the following purposes:

4.1 Contact Form Submissions

  • Purpose: To respond to your inquiries and communicate with you
  • Legal Basis: Legitimate interest (Article 6(1)(f) GDPR) and your consent when submitting the form

4.2 Security and Spam Prevention

  • Purpose: To protect our website from abuse, spam, and malicious activity
  • Legal Basis: Legitimate interest in maintaining website security (Article 6(1)(f) GDPR)

5. Third-Party Services

We use the following third-party services that may process your data:

5.1 Google reCAPTCHA v3

We use Google reCAPTCHA to protect our contact form from spam. When you submit the form, Google may collect data including your IP address and browser information.

Google Privacy Policy

5.2 Novu

We use Novu to send email notifications when contact forms are submitted. Novu processes your email address and message content as a data processor on our behalf.

5.3 Vercel

Our website is hosted on Vercel. As our hosting provider, Vercel may process technical data such as IP addresses for the purpose of delivering the website to you.

Vercel Privacy Policy

6. Data Retention

  • Contact form submissions: We retain your messages for up to 3 years to maintain correspondence history and respond to follow-up inquiries.
  • Rate limiting data: Stored temporarily in memory and not persisted.

7. Your Rights

Under the GDPR (Articles 12-23), you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Request your data in a machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time (Article 7(3) GDPR)

To exercise any of these rights, please contact us using the contact form on this website. We will respond within 30 days as required by GDPR.

8. Cookies and Local Storage

This website uses only essential storage mechanisms:

  • Theme preference: We store your light/dark mode preference in your browser's localStorage. This is not a cookie and contains no personal data.

We do not use tracking cookies, analytics cookies, or advertising cookies.

9. Data Security

We implement appropriate security measures to protect your data, including:

  • SSL/TLS encryption for all data transmission
  • Input sanitization to prevent injection attacks
  • Rate limiting to prevent abuse
  • Security headers (CSP, X-Frame-Options, etc.)

10. International Data Transfers

Some of our third-party service providers (Google, Vercel) may transfer data to servers located outside the European Economic Area. These providers maintain appropriate safeguards as required by GDPR, including Standard Contractual Clauses.

11. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Portuguese Data Protection Authority:

Comissão Nacional de Proteção de Dados (CNPD)
www.cnpd.pt

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

← Back to Home