Who is responsible
EGORA Digital (“we”, “us”) is the controller of the personal data collected through https://egoradigital.com and its subdomains. We are based in Évora, Portugal.
For anything about your data, write to egoradigital@gmail.com. We read every message ourselves.
What we collect
We collect as little as we can:
- When you use the contact form: your name, email address and business name (required), and optionally your current website, your project brief, the services you are interested in, the package you have in mind and your preferred next step.
- When you email, call or message us on WhatsApp or Instagram: what you choose to send us and your contact details on that channel.
- When you visit the site: the technical data any web server records, such as IP address, browser, device type, the page requested and the time. We also count visits ourselves, without cookies: a visitor is a hash of IP address and browser that changes every day, and the IP address itself is not stored.
- Only if you accept in the cookie banner: Google Analytics measures how the site is used (pages viewed, how you arrived, approximate location, device and browser) using cookies. We use no advertising or retargeting tools.
- Your cookie banner choice, stored in your own browser (see the Cookie Policy).
Why we use it, and on what legal basis
We use personal data only for these purposes:
- To answer your enquiry and prepare the free website review, recommendation or quote you asked for: steps taken at your request before entering into a contract (GDPR Article 6(1)(b); KVKK Article 5(2)(c)).
- To run a project we agree on, and to invoice for it: performance of a contract and our legal obligations (GDPR Article 6(1)(b) and (c); KVKK Article 5(2)(c) and (ç)).
- To keep the website secure and working, using server logs: our legitimate interest (GDPR Article 6(1)(f); KVKK Article 5(2)(f)).
- To keep records needed to establish or defend legal claims: legitimate interest and, under KVKK, Article 5(2)(e).
- To see which pages are useful and improve the site with Google Analytics: your consent (GDPR Article 6(1)(a); KVKK Article 5(1)), which you can withdraw at any time with “Cookie settings” at the bottom of every page.
What happens if you don't share it
Your name, email address and business name are needed to reply to an enquiry; everything else on the form is optional. We do not make decisions about you by automated means, and we do not build profiles.
International transfers
We are based in the EU (Portugal). Some providers above are located in, or may access data from, other countries, including the United States.
Where data leaves the EU/EEA for a country without an adequacy decision, the transfer relies on the safeguards those providers offer, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework where the provider is certified. For transfers subject to KVKK, see our KVKK Notice.
How long we keep it
- Enquiries that don't lead to a project: up to 24 months after our last exchange, then deleted.
- Project and billing records: for as long as tax and accounting law requires (in Portugal, up to 10 years).
- Server logs: a short period set by our hosting provider, normally no more than a few weeks.
- Our own visit counts: 400 days.
- Google Analytics: event-level data for 2 months, after which only aggregated reports remain.
- Your cookie banner choice: until you clear your browser's site data.
How we protect it
The site is served only over HTTPS. The database is not reachable from the internet, access to it is limited to us, and the admin area is password-protected. No method is perfectly secure, but we take reasonable measures and keep them up to date.
Your rights (GDPR)
You can ask us for access to your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time.
You can also complain to a supervisory authority. Ours is the Comissão Nacional de Proteção de Dados in Portugal (cnpd.pt); you may also go to the authority where you live or work. In the UK it is the ICO (ico.org.uk).
If you are in Turkey (KVKK)
Law No. 6698 on the Protection of Personal Data may also apply. Our KVKK Notice (Aydınlatma Metni) sets out, in Turkish and English, what we process, why, who receives it and your rights under Article 11.
Children
Our services are for businesses. We do not knowingly collect data from anyone under 16.
How to make a request
Email egoradigital@gmail.com with the subject “Privacy request”, ideally from the address you used with us. We answer within one month (GDPR) or 30 days (KVKK) and may ask you to confirm your identity first. It is free.
Changes
If we change how we handle data, we update this page and the date at the top.