Privacy Policy

This policy explains how personal data is processed for people who visit alongga.pt and for those who contact us through it.

The controller is 123 INSPIRA, UNIPESSOAL LDA (trading as Alongga by home), tax ID 514060557, registered office Rua da Botica, 126, 4485-929 Mosteiró, Vila do Conde, Portugal. You can contact us at geral@alongga.pt, by phone on +351 968 990 069 (call to a national mobile network) or by post at the address above.

When you fill in the “Information Request” form, we collect the details you give us:

• subject (general information or material purchase);
• name;
• address and postal code;
• phone number;
• the message you write.

The date and time of sending, the IP address it was sent from and the site address are attached to the message, so that we can detect abuse.

Purpose: to answer your request and, where relevant, prepare a service proposal or the sale of material.

Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering people who contact us (Article 6(1)(f)).

How it reaches us: the form is sent through Provider's form service, which runs on Cloudflare's infrastructure (forms.zender.pt), and delivered by e-mail to geral@alongga.pt. The form service does not keep a copy of the request after delivering it.

Spam protection: we use Altcha, which asks your browser to do a small calculation before sending. It uses no cookies, does not track you and sends nothing to third parties. The form also has a hidden field that only automated programs fill in.

Please do not include information about your health in the message. If you do, it will only be used to answer your request.

Retention: we keep information requests for up to 2 years after the last contact. If the request leads to a contract, the data is kept for the duration of the contract and for as long as the law requires afterwards (for example, tax obligations).

On your first visit we show a notice where you can accept or refuse each category of cookies. You can change your choice at any time with the “Manage cookies” link at the bottom of every page. Withdrawing consent does not affect what was done before.

Strictly necessary — always on:

• cc_consent (the site's own cookie): stores your cookie choices, when you made them and a random consent identifier, so that we do not ask again on every page. It lasts 182 days (about 6 months). Legal basis: the obligation to demonstrate consent and our legitimate interest in running the site.

Analytics: the site does not currently use any analytics or statistics tool. The category is in the notice so that, if we ever use one, it only runs with your consent; in that case we will update this policy first.

Marketing — only with your consent:

• Google Tag Manager and Google Ads (Google Ireland Limited). If you accept this category, the site loads Google Tag Manager, which records in Google Ads when you click the phone number, when you open WhatsApp from the site and when you send the form successfully. This tells us which of our ads bring in enquiries. The content of the form is not sent to Google.
• To do this, Google receives the page address, your IP address, technical browser data and identifiers stored in cookies such as _gcl_au and _gcl_aw (up to 90 days), as well as cookies on Google's own domains.
• Legal basis: your consent (Article 6(1)(a) GDPR). If you refuse, none of this is loaded.

Google also processes this data for its own purposes, as an independent controller, under its privacy policy: https://policies.google.com/privacy.

The site loads no other third-party content (fonts, videos, maps or social media) and sets no other cookies.

The site is hosted by Cloudflare, Inc., which delivers it from its network and protects it against attacks. To do so, Cloudflare processes your IP address and technical request data (such as the page requested, the date and time and your browser) in short-lived logs. It acts as our processor.

Legal basis: our legitimate interest in keeping the site available and secure (Article 6(1)(f) GDPR).

The WhatsApp button loads nothing from WhatsApp until you use it. Only when you click the “Help” link are you taken to WhatsApp (WhatsApp Ireland Limited, part of Meta), where that service's terms and privacy policy apply.

The “Collaborators” link leads to the app.alongga.pt application, which is reserved for our staff. It is a separate service with its own rules and is not covered by this policy.

The site also links to third-party sites, such as the Portuguese Electronic Complaints Book. When you follow those links, their own policies apply.

We do not sell your data. We only use service providers that process it on our behalf, under contract and with appropriate safeguards:

• Provider — form service and hosting of the geral@alongga.pt mailbox, on servers in the European Union;
• Cloudflare, Inc. — hosting and delivery of the site and operation of the form service;
• Google Ireland Limited — Google Tag Manager and Google Ads, only if you accept marketing cookies (see section 3).

We may also disclose data where the law requires it or when ordered by a judicial or administrative authority.

Transfers outside the European Union: Cloudflare and Google may process data in the United States. These transfers are covered by the EU-US Data Privacy Framework, under which both are certified, and by the standard contractual clauses approved by the European Commission.

Under the GDPR, you have the right to:

• access the data we hold about you;
• ask for it to be corrected if it is wrong or incomplete;
• ask for it to be erased;
• ask for processing to be restricted;
• receive the data you gave us in a structured, commonly used format (portability);
• object to processing based on our legitimate interest;
• withdraw your consent at any time, without affecting processing carried out before.

To exercise these rights, write to geral@alongga.pt or to our postal address. We reply within one month, which may be extended by two further months for complex requests, in which case we will let you know. Requests are free of charge. If we have doubts about your identity, we may ask you for information to confirm it.

You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD): https://www.cnpd.pt.

The site is not intended for children under 13. Information requests concerning minors should be made by their parents or legal guardians.

The site is only served over an encrypted connection (HTTPS) and with security headers that limit what each page can load. Access to information requests is restricted to the people at 123 INSPIRA who handle them, and our service providers are bound to protect the data they process on our behalf.

We may update this policy, for example if the site starts doing something different. The version in force is always the one published on this page, with the date of the last update. If a change affects what you accepted in the cookie notice, we will ask for your choice again.