Privacy Policy

1. Who we are

Impeca is a digital agency providing website development, marketing, analytics and AI automation services. Website: impeca.net.

For data protection matters write to [email protected] — we reply within 30 days, usually much sooner.

2. What data we collect

Data you give us: name, phone, email, business name and your message — when you fill in the form or register in the client area.

Website chat conversations: the text of your messages and of the assistant’s replies, the page you wrote from and the time — even if you leave no contact details.

Usage data: pages viewed, referral source, device and browser type, approximate location (country/city level), page interactions.

Technical data: IP address, visit time, cookie identifiers.

We do not collect card payment details on this site, nor special categories of data (health, religion, political views, etc.).

3. Why we do it (purpose and legal basis)

To answer your enquiry — basis: your request and our legitimate interest in communicating with prospective clients.

To deliver a contracted service — basis: performance of a contract.

To improve the chat answers and our services — basis: our legitimate interest in understanding what visitors ask. Conversations are read only by our team.

To improve the website (analytics, session recordings) — basis: your consent to analytics cookies.

Newsletter and materials — basis: separate consent; you can unsubscribe any time with one click.

To meet legal obligations (accounting, tax) — basis: legal obligation.

4. Analytics and session recordings

We use Google Analytics 4 and Microsoft Clarity. Clarity may record anonymised sessions (mouse movement, clicks, scrolling) — this helps us see where the site is awkward to use.

Fields containing personal data (forms, passwords) are masked in those recordings and we cannot see what you typed.

These tools only activate after you consent to analytics cookies.

5. Who we share data with

We do not sell your data. We share only with providers essential to running the site:

Hosting provider (site and database), Cloudflare (security and performance), Google (Analytics), Microsoft (Clarity), email provider (message delivery), Anthropic (processing AI chat requests, if you use it).

Some providers may process data outside the EEA. In those cases the transfer relies on standard contractual clauses or adequacy decisions.

6. YouTube API Services

We use YouTube API Services to manage our own YouTube channel (@impeca-net): uploading videos, setting titles and descriptions, playlists and comments on behalf of the channel. This tool works only with our channel and does not collect, store or share data of website visitors or other YouTube users.

By using YouTube you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms); Google's handling of data is described in the Google Privacy Policy (https://policies.google.com/privacy). Access of the application to a Google account can be revoked at https://security.google.com/settings/security/permissions.

7. How long we keep it

Enquiries and correspondence — up to 3 years after the last contact.

Contracted client data — for the duration of the engagement plus 5 years (accounting requirements).

Analytics data — up to 14 months.

Chat conversations — up to 12 months, then deleted automatically (if you left contact details, the conversation is kept with your enquiry).

Client-area account — while it exists; after deletion, data is erased within 30 days.

8. Your rights

You have the right to: know what data we hold; correct it; erase it ("right to be forgotten"); restrict processing; object to processing; receive a copy in machine-readable format; withdraw consent at any time.

To exercise any of these, write to [email protected]. We do not require a reason.

If you believe we have infringed your rights, you may lodge a complaint with your national data protection authority.

9. Security

The site runs over HTTPS, passwords are stored hashed, and database access is restricted. We update the system regularly and keep backups.

No system is completely secure — in the event of a breach that threatens your rights, we will notify you and the supervisory authority as required by law.

10. Children

Our services are intended for businesses. We do not knowingly collect data from anyone under 16.

11. Changes

If we change this policy materially, we update the date above and notify registered users by email.

Who is responsible for your data

Impeca
Av. Aliados 167, 4400-011 Vila Nova de Gaia
[email protected]