DUO Building · Privacy
Privacy policy
Data controller
DUO Building is the brand presented on this website. The data controller is CULEAC UNIPESSOAL, LDA, tax number 517737990. For privacy questions or to exercise your rights, contact [email protected].
Project enquiries
Submitting the form shares your name, email, phone and optional project details. The enquiry is stored so DUO can follow it up; we send a confirmation to your email and a notification to the team. Unsubmitted fields stay on the page. A random identifier and a cryptographic digest are kept for the browser session to prevent duplicate submissions. If you contact us by email, phone or WhatsApp, we use the information you share to respond and discuss your project. Steps you request before entering a contract rely on GDPR Article 6(1)(b). An estimate enquiry does not subscribe you to marketing.
Browsing and security data
The hosting service may process technical data such as IP address, browser, requested pages and access time to deliver and protect the website. The legitimate interest in keeping the service secure is the basis under GDPR Article 6(1)(f).
Statistics, recordings and advertising
Future integrations with Google Analytics, Microsoft Clarity and Meta Pixel depend on separate consent under GDPR Article 6(1)(a). They are switched off in this version. The cookie policy explains the purposes, controls and withdrawal of consent. This website version makes no automated decisions with legal effects.
Recipients and external services
Authorised DUO team members receive the information needed to respond to your enquiry. Cloudflare provides hosting and database storage; Resend processes transactional emails. These services do not subscribe you to marketing. Opening WhatsApp, social media or another external link takes you to the relevant provider’s service. Once measurement is activated with consent, Google, Microsoft or Meta may receive browsing data.
Retention and transfers
Enquiries are automatically removed from the website database after 180 days. Sent email bodies are removed from the technical queue after 30 days. Pseudonymised request-limit records expire after two hours. Subsequent correspondence in DUO’s mail systems is handled separately. Your cookie choice is stored in your browser for 180 days. Messages sent through external channels follow the handling applicable to the enquiry and the service used. Cloudflare and Resend may use international subprocessors; their data-processing agreements describe the safeguards applicable to transfers. Provider backups and logs have their own retention cycles. Contact us for information about the handling of your enquiry.
Your rights
Where applicable, you may request access, correction, erasure, restriction and portability of your data, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier processing. Contact us at the email above. You may also complain to Portugal’s Comissão Nacional de Proteção de Dados (CNPD).
Updates
This policy describes the current operation and will be updated when enquiry handling or measurement services are activated. Last updated: 29 September 2026.