Privacy policy

1. Who we are

The controller of your personal data is Vasco Daniel Ferreira Antunes de Almeida (tax number 221289615), which runs the Clínica Tech shop, Rua Rogério Reynaud 22, loja 20, 3080-251 Figueira da Foz. Contact: [email protected] · +351 923 182 534.

This policy explains what personal data we handle when you visit this website, ask us for a quote or get in touch, what we use it for, how long we keep it and what your rights are. For any question about your data, write to [email protected].

2. In short

• We do not use advertising or analytics cookies, or any tracking tools (such as Google Analytics).
• We only handle the data you give us when you ask for a quote, contact us, reserve a refurbished device, ask for a trade-in or a «Notify me», and only for those purposes.
• The quote form does not store your request on the website: it is emailed to our mailbox. Reservations, trade-in requests and «Notify me» requests are stored on the server for the periods given in section 6.
• We never sell your data or pass it on for advertising.

3. Quote requests (website form)

What data: your name; your email address or phone number; how you would like us to reply (WhatsApp, a call or email); the type and model of the device; the fault and the description you write; if you started from a repair shown on the website, a reference to that repair; and whether you used the Portuguese or the English version of the site, so that we can reply in the same language.

Why, and on what legal basis: to answer your request and prepare the quote — steps taken at your request before a contract (Article 6(1)(b) GDPR). We do not use this data for advertising.

How: the website's server checks the request (including spam protection) and sends it by email, through the EmailJS service, to the Clínica Tech mailbox. The website keeps no copy of it. If sending fails, the site offers to send the same text by WhatsApp; in that case it is your own WhatsApp app that sends the message.

Protection against abuse: to stop mass sending, the server counts the requests sent from each connection. For that it keeps, for no more than 24 hours, a code derived from the IP address (not the address itself) and the times of the requests. Your browser also stores the times of your last requests, without their content (see the Cookie Policy).

How long: we keep the email with your request for as long as we need to reply and follow up on the quote, and at most 12 months after our last contact. If the request leads to a repair, section 5 applies.

4. Contact by phone, WhatsApp, email and social media

When you call or write to us, we use your contact details and what you tell us only to reply. Messages sent through WhatsApp and social networks are also subject to those services' own privacy rules. We keep these conversations for the same period as in section 3.

5. Repairs in the shop

When you leave a device with us, we record your name, contact details, the device and the work done, in order to carry out the repair, let you know when it is ready and honour the warranty (performance of a contract). Invoicing records, including your tax number if you give it, are kept for as long as tax law requires (currently 10 years).

We only access what is on the device (photos, messages, files) as far as we need to diagnose and test it. Whenever possible, back up your device before you hand it in.

6. Refurbished store: reservations, trade-ins and «Notify me»

Reservations: when you reserve a device on the website, we keep your name, mobile number and/or email, your preferred collection time, any message you write, the device and the accessories you chose. We use this data to hold the device, confirm the reservation with you and complete the sale in the shop (steps taken at your request before a contract and performance of the contract, Article 6(1)(b) GDPR). The shop also receives an email notice (EmailJS). The personal data of a reservation is erased 12 months after it ends (collected, cancelled or expired); only the record of the device and the amount remains, without personal data. If you buy, the invoice is kept for the period required by law.

Trade-ins: for an estimate request we keep the device, your answers about its condition, your notes, the photos you send, your name and contact details, to give you an estimate (steps taken at your request before a contract). Photos are kept in a private area of the server, only accessible to our logged-in team, and are never published. Photos are deleted 90 days after the request is closed and the remaining personal data 12 months after the last contact.

«Notify me»: if you ask to be told when a device is available, we keep your email, the device or model you want and the date of your consent. We only send notes after you confirm the request in the email we send you (double opt-in); without confirmation the request is deleted after 7 days. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time with the link in every email — the request is then deleted at once. Confirmed requests are deleted 12 months after confirmation. Emails are sent through EmailJS.

Abuse protection: as with the quote form, the server counts the requests made from each connection (a code derived from the IP address, kept for at most 24 hours).

7. Reviews

The reviews shown on the website come from our Google profile and are imported through Google's official service (Google Business Profile). For each review we choose to show, we publish what its author published on Google — the name (or “Anonymous”), profile photo, rating, text and date — together with our reply. If a review is deleted or edited on Google, the website stops showing it or updates it at the next synchronisation. With a customer's permission we may also publish feedback given in the shop, under the name the customer chooses.

We do this on the basis of our legitimate interest in showing what customers think of us. If you do not want one of your reviews to appear on the website, write to us and we will remove it.

Profile photos are loaded directly from Google's servers (googleusercontent.com) when a review appears on screen: Google receives your IP address, but the request does not say which page it comes from.

8. Visiting the website

We use no analytics or advertising tools. As with any website, the server keeps technical records of the requests it receives (IP address, date and time, page requested and browser) in order to work and for security. These records are kept by our hosting provider for the period it sets, and we do not use them to identify visitors (legitimate interest in keeping the website secure and running).

The website does not embed maps: the “Directions” and “See on Google” buttons open Google Maps only when you tap them. The same goes for the links to WhatsApp, Facebook, Instagram and Telegram. If a repair has a YouTube or Vimeo video, the video only loads when you tap “Watch video”.

9. Who receives the data

• Our hosting provider, which hosts the website and our mailbox.
• EmailJS (emailjs.com), which delivers the requests made through the form by email.
• Google, which provides the reviews from our profile and receives the IP address of anyone who sees reviewers' profile photos.
• Public authorities, only when the law requires it.

Service providers handle the data on our behalf and only for these purposes. If any of them processes data outside the European Economic Area, the transfer must rely on the safeguards set out in the GDPR (for example, standard contractual clauses approved by the European Commission).

10. Your rights

At any time and free of charge, you can ask for access to your data, its correction or erasure, restriction of processing and portability of the data you gave us, and you can object to processing based on our legitimate interest. Just write to [email protected] or talk to us in the shop. We reply within one month and may ask you to confirm your identity.

If you believe your rights have not been respected, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt, Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa.

11. Security

The website uses an encrypted connection (HTTPS). Quote-form requests are checked on the server and are not stored on the website; reservations, trade-ins and «Notify me» requests are kept in a database that is not reachable from the internet, and the management area is only open to our team, behind a password. We make no automated decisions and build no profiles from your data.

12. Changes to this policy

If we change the way we handle personal data, we will update this policy and the date at the top.