1. Who we are
Code Experts Lab ("we," "us," "our") is the data controller for the personal data processed through this website and in the course of delivering software development services. We're based in Porto, Portugal, and operate under Portuguese and EU law.
- Trading name: Code Experts Lab
- Registered office: R. de São Rosendo 286, 4300-478 Porto, Portugal
- NIPC/VAT: PT515704385
- Contact for privacy matters: support@codeexpertsslab.com
2. What data we collect
- Contact and enquiry data. Name, work email, phone number (if provided), and the content of any message you send through the contact form or checkout.
- Order data. Billing name, company name, billing address, EU VAT ID (if provided), country, engagement preferences, and the packages and add-ons you select. This site's cart and checkout are demonstration commerce running client-side; no live payment is processed and no card data is collected, stored, or transmitted by us at any point (see §8 and Terms of Service).
- Technical and analytics data. Once you consent to analytics cookies, Google Analytics 4 (GA4) collects standard usage data — pages visited, approximate location at country/region level, device and browser type, and referral source. This never loads before consent (see Cookie Policy).
- Local browser storage. Your cart contents and cookie-consent choice are stored in your own browser (localStorage), not on our servers, so we can restore your cart and your consent preference on your next visit.
3. Lawful basis for processing
- Contract — processing your order, billing details and engagement information, to prepare and (once you confirm by email) deliver the service you've purchased.
- Consent — analytics cookies (GA4) and any other non-essential tracking, gated behind the cookie banner described in the Cookie Policy. You can withdraw this consent at any time.
- Legitimate interest — responding to enquiries sent through the contact form, and basic security logging to protect the site against abuse.
- Legal obligation — retaining invoicing and tax-relevant records as required under Portuguese and EU law.
4. How we use your data
To respond to enquiries; to prepare and deliver the software engagement you've purchased or requested a quote for; to issue invoices and meet accounting and tax obligations; to operate and secure this website; and, only with your consent, to understand how the site is used via GA4.
5. Cookies and analytics
Full detail — including the exact cookie table, retention periods, and how to change your choice — is in the Cookie Policy. In summary: strictly necessary cookies (cart and consent state) are always on; GA4 analytics cookies load only after you actively accept them, and you can withdraw that consent at any time from the "Cookie settings" link in the footer.
6. How long we keep your data
- Contact-form and enquiry data: retained for up to 24 months from your last contact, then deleted, unless a live engagement requires longer retention.
- Order and billing data connected to an actual engagement: retained for the period required by Portuguese tax and accounting law (currently 10 years for invoicing records).
- Analytics data collected via GA4: retained per Google's configured retention window, currently up to 14 months, and only for visitors who consented.
- Locally stored cart and consent data: retained in your own browser for up to 30 days (cart) or until you change your choice (consent), and can be cleared at any time by clearing your browser storage.
7. Who we share data with
- Google Analytics (Google Ireland Limited) — only after consent, for aggregate usage analytics. Google acts as a data processor under its own data processing terms.
- We do not sell personal data, and we do not share it with third parties for their own marketing purposes.
- Data may be disclosed where required by law, or to professional advisors (e.g. an accountant) strictly for the purpose of meeting our own legal obligations.
8. International data transfers
Where a processor we use (such as Google Analytics) transfers data outside the European Economic Area, that transfer relies on the safeguards required under GDPR, such as Standard Contractual Clauses or an adequacy decision.
9. Your rights
Under GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure ("right to be forgotten"), subject to our legal retention obligations; restrict or object to certain processing; request data portability; and withdraw consent at any time where processing is based on consent (this doesn't affect processing carried out before withdrawal). To exercise any of these rights, email support@codeexpertsslab.com. We respond within one month, as required by GDPR.
10. Security
We apply reasonable technical and organisational measures to protect the data we hold, including encrypted transport (HTTPS) across the site and restricted access to order and contact data.
11. Children
This site and its services are intended for business use and are not directed at children. We do not knowingly collect personal data from children.
12. Changes to this policy
We may update this policy as the site or our data practices change. The "Last updated" date at the top of this page reflects the most recent revision.
13. Complaints and supervisory authority
If you believe your data has been mishandled, contact us first at support@codeexpertsslab.com so we can address it directly. You also have the right to lodge a complaint with Portugal's data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at cnpd.pt, or with the supervisory authority in your own EU member state.