VelocityForge
GDPR

Privacy policy

Last updated: 30 October 2026

Who handles your data

The data controller is the owner of Velocity Forge, a one-person web studio based in Évora, Portugal. For any question about your data, use the contact form on this site.

What I collect

Only what you fill in on the contact form: name, business name, email, phone (optional), project type, timeline, budget, your description and how you heard about Velocity Forge.

I use no advertising cookies and no analytics tools. The site stores only your theme and language preference in your browser (localStorage) — that data never leaves your device.

What I use it for

To reply to your enquiry and, where it makes sense, prepare a proposal. The legal basis is your consent and the pre-contractual steps you request (Article 6(1)(a) and (b) GDPR).

I send no newsletters or campaigns, and I never sell or share your data with third parties.

Who has access

Only me. Data is stored in a database run by Supabase and the site is hosted on Vercel. Both act as processors and may handle data outside the EU under Standard Contractual Clauses approved by the European Commission.

How long I keep it

If we do not start a project, I delete your data 12 months after our last contact. If you become a client, I keep it for the length of the relationship and for as long as tax law requires.

Your rights

You can request access, rectification, erasure, restriction or portability of your data, object to processing and withdraw consent at any time — just write through the contact form. I reply within one month at most.

If you believe your data was mishandled, you can complain to the Portuguese data protection authority, CNPD (www.cnpd.pt).