Privacy Policy

1. Controller

Points & Loops - Lda ("DOMA Labs"), NIF (VAT) 519207793, registered at Avenida do Brasil, n.º 33, Esc. B, 1700-062 Lisboa, Portugal. For any privacy question: hello@domalabs.pt.

2. What we collect

• Contact form: name, company (optional), email, project description and budget range.
• Email: whatever you send us directly at hello@domalabs.pt.
• Usage statistics — only if you accept analytics cookies: pages visited, clicks on projects and buttons, device and browser type and approximate location (country/city), via Google Analytics 4 with IP anonymisation.
• Technical data: IP address and request logs processed by our hosting provider to deliver the site and keep it secure.

3. Purposes and legal bases

• Answering enquiries and preparing proposals — steps taken at your request before a contract (GDPR art. 6(1)(b)).
• Managing client relationships and meeting tax and accounting duties — contract and legal obligation (art. 6(1)(b) and (c)).
• Measuring site usage to improve it — consent (art. 6(1)(a)), which you can withdraw at any time.
• Security and abuse prevention — legitimate interest (art. 6(1)(f)).

4. How long we keep data

• Enquiries that don't become a project: up to 24 months after the last contact.
• Client data: for the duration of the contract and then for legally required periods (invoicing records: 10 years).
• Google Analytics statistics: up to 14 months.

5. Who we share it with

We never sell personal data. We use processors that act only on our behalf: Google Ireland Limited (Firebase hosting, Cloud Firestore database and Google Analytics) and our email provider. We may also disclose data to authorities where the law requires it.

6. International transfers

Some providers may process data outside the European Economic Area. Such transfers are covered by the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission.

7. Your rights

You can request access, rectification, erasure, restriction or portability of your data and object to its processing. Where processing is based on consent you can withdraw it at any time — for cookies, on the Cookie Policy page. Write to hello@domalabs.pt; we reply within one month.

You may also lodge a complaint with the Portuguese data protection authority (CNPD) — www.cnpd.pt.

8. Cookies

The cookies and similar technologies we use are described in the Cookie Policy.

9. Security

We apply appropriate technical and organisational measures: encrypted connections (HTTPS), authenticated access to the admin area and providers with recognised security certifications.

10. Children

This site is aimed at businesses and professionals and is not directed at children under 16.

11. Changes

We may update this policy. The date of the last review is shown at the top of the page.