Privacy Policy

This policy explains what personal data we collect through this site, what we use it for, and what rights you have over it. It is written to be read. If anything is unclear, tell us and we'll explain.

This is a translation. The Portuguese version is the authoritative text; if the two disagree, the Portuguese governs.

Who is responsible for your data

The controller for data collected on this site is Tomorrowcode - Lda (Sociedade por Quotas), trading as Kiwi Digital.

• Tax number (NIF): 519172795
• Address: Av. Padre Mário, N.º 47, 4730-303 Moure, Vila Verde, Portugal
• Contact: through the contact form

What data we collect

When you fill in the contact form

We collect what you write in it: name and email (required), plus company, phone, website, enquiry type, budget, timeline, roles and message, if you provide them.

When you browse the site

We use Google Tag Manager. Until you decide, or if you decline, the tool loads but stores no cookies and does not identify you: it tells Google only that a visit happened, with nothing that identifies who you are. If you agree, it starts collecting usage data (pages visited, device type, where the visit came from) and may store cookies on your device.

What we use your data for

• To reply to you. The form's contents reach us by email so we can follow up. Legal basis: pre-contractual steps taken at your request.
• To send you news about our services, but only if you have expressly agreed to that. Legal basis: your consent. You can withdraw it at any time, without affecting what was sent before.
• To understand how the site is used, but only if you agreed when we asked. Legal basis: your consent. You can change your mind at any time using Cookie Settings at the bottom of the page.

We do not sell your data. We do not use it for automated decision-making or profiling.

Who we share your data with

We do not sell or pass your data to third parties for their own purposes. We do use suppliers who process data on our behalf (processors):

• Brevo: sending email and managing the contact list.
• Google: Google Tag Manager, for usage measurement. Data that identifies you, and cookies, only if you agreed.
• Our hosting provider: keeps the site online and records server access.

These suppliers may process data outside the European Union. Where they do, the transfer relies on the mechanisms provided for in the GDPR, such as the European Commission's standard contractual clauses.

How long we keep it

We keep contact details for as long as they are needed to reply to you and follow up on your enquiry. If you ask us to delete them, we delete them, unless the law requires us to keep a record.

Your rights

Over your personal data, you have the right to:

• Know what data we hold and ask for a copy;
• Correct data that is wrong or incomplete;
• Ask us to delete it;
• Restrict or object to particular uses;
• Ask for your data in a format you can take to another service;
• Withdraw any consent you have given, at any time.

To exercise any of these rights, contact us. We respond within the period the law requires.

If you believe we have not handled your data as we should, you can complain to the Comissão Nacional de Proteção de Dados (CNPD), the supervisory authority in Portugal.

Cookies

On your first visit we ask whether we may measure visits. Until you answer, or if you decline, we store no measurement cookies. Google's tool loads, but without storing anything on your device and without identifying you. The site works the same either way.

Your answer is stored in your browser so we don't ask again on every page. To change your mind, use Cookie Settings at the bottom of any page. You can also block or delete cookies in your browser settings.

Changes to this policy

If we change this policy, we update the date at the top of the page. The version published here is always the one in force.