Legal

Privacy Policy

Last updated: 15 July 2026

Your privacy matters to us. This policy explains, clearly, what personal data we collect when you use our website, what we use it for, how long we keep it and what your rights are under the General Data Protection Regulation (GDPR).

1. Who is the data controller

ValuePoint is the brand under which André Capelas, as founder, and his team provide web design, web development and SEO services in Porto, Portugal. For data protection purposes, the controller of your personal data is André Capelas. You can contact him at any time at geral@valuepoint.pt for any question relating to this policy or to the processing of your data.

2. What data we collect

We collect only the data you provide voluntarily and the minimum technical data needed for the website to work.

Data you provide through the contact form:

  • Name
  • Email address
  • Service of interest
  • Phone (optional)
  • Company (optional)
  • Message (optional)

Technical data collected automatically when you submit the form:

  • Your browser identifier (user agent) and the origin of the request, used to detect automated submissions and prevent abuse (spam).

Anonymous usage statistics: when you visit the website, aggregated and anonymous usage data is collected (for example, the pages visited, the source of the visit, the country, the device type and real page performance), through Vercel's Web Analytics and Speed Insights tools. These tools do not use cookies, do not collect data that identifies you and do not track you across sites.

Analytics data, only with your consent: if you accept analytics cookies, we use Google Analytics 4 to understand how the website is used. In that case, data such as the pages visited, the source of the visit and the device type is collected, associated with an identifier generated by cookies and with your IP address. This data is only collected after you give your consent, and you can withdraw it at any time (see the "Cookies" section). If you choose essential cookies only, Google Analytics is not activated.

We do not collect special categories of data (for example, health data, political or religious beliefs) and we do not carry out automated decision-making or profiling based on your data.

3. What we use your data for and on what basis

We process your data for the following purposes and legal bases:

  • Responding to your contact request. When you fill in the form, we use your data to respond, clarify questions and assess whether we can help with your project. Legal basis: your consent and the taking of pre-contractual steps at your request.
  • Preventing abuse and ensuring the security of the website. Legal basis: ValuePoint's legitimate interest in protecting the service against misuse.
  • Measuring and improving the website's performance. We use anonymous usage statistics, which do not rely on cookies and do not identify you, to understand how the website is used and to make it faster and more useful. Legal basis: ValuePoint's legitimate interest in maintaining and improving the service.
  • Analysing usage with Google Analytics. If you give your consent, we use Google Analytics 4 to better understand how the website is used. Legal basis: your consent, which you can withdraw at any time without affecting the lawfulness of prior processing.

We do not use your data for automated marketing, nor do we sell or share it with third parties for commercial purposes.

4. Who we share your data with

We do not sell your data. To provide the service, we rely on providers that process data on our behalf (processors), under contracts that require them to protect your information:

  • Supabase: securely stores the data you submit through the contact form, in a database that is our record of requests.
  • Resend: sends us the email notification with the content of your request, so that we can respond.
  • Vercel: hosts and serves the website and provides us with aggregated, anonymous usage statistics (Vercel Web Analytics and Speed Insights). These tools do not use cookies, do not collect data that identifies you and do not track you across sites: they only measure, in aggregate, data such as the pages visited, the source of the visit, the country, the device type and real page performance.
  • Google (Google Analytics): if you accept analytics cookies, provides us with statistics on how the website is used through Google Analytics 4. It only collects data after you give your consent.
  • Google Fonts: provides the website's typefaces, loaded from Google's servers.

We use Vercel's anonymous statistics, which do not use cookies or identify you, on the basis of our legitimate interest in maintaining and improving the service. Google Analytics, as it relies on cookies and on an identifier of your device, is only activated after you give your consent and can be turned off at any time in the cookie settings.

Some of these providers may process data outside the European Economic Area. In those cases, the transfer is made on the basis of appropriate safeguards provided for in the GDPR, namely the standard contractual clauses approved by the European Commission.

5. How long we keep your data

We keep the data from your contact request only for as long as necessary to respond and to follow up on any potential business relationship. If the contact does not lead to a collaboration, we delete the data within a reasonable period. You can, at any time, request the early deletion of your data.

6. Your rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you;
  • Request the correction of inaccurate or incomplete data;
  • Request the deletion of your data (right to erasure);
  • Object to the processing or request the restriction of processing;
  • Request the portability of the data you provided to us;
  • Withdraw your consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at geral@valuepoint.pt. If you consider that the processing of your data does not comply with the law, you also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.

7. Cookies

Cookies that are strictly necessary for the website to work are always active. Analytics or third-party cookies, should they ever be used, are only installed after you give your consent.

When you visit the website for the first time, you are shown a cookie notice where you can accept or keep only the essential cookies. You can change or withdraw your consent at any time, through the "Cookie settings" link in the website footer.

Strictly necessary cookie (always active):

  • vp-consent (first-party cookie): stores your cookie preference, so that the notice does not have to appear again on each visit. Duration: around 6 months. It is essential to the operation of the cookie notice itself.

Analytics cookies (only activated with your consent): if you accept, Google Analytics 4 sets the following cookies to distinguish visitors and sessions in aggregate. They are not set if you choose essential cookies only:

  • _ga (Google): distinguishes visitors. Duration: around 2 years.
  • _ga_3T5WMQ4D22 (Google): keeps session state. Duration: around 2 years.

8. Changes to this policy

We may update this policy whenever necessary, for example to reflect changes in the services we use or in applicable law. When we do, we update the "last updated" date at the top of this page. We recommend that you review it periodically.

9. Contact

For any question about this policy or about the processing of your personal data, contact us at geral@valuepoint.pt.