Privacy

Privacy & Cookies Policy

Last updated: July 2026.

This policy explains how personal data collected through miguelmaio.com is handled, under the GDPR (Regulation (EU) 2016/679) and applicable e-privacy rules.

Controller

The data controller is Miguel Maio. For general enquiries use the contact form. To exercise your rights, use the privacy request form on the privacy page.

What I process and why

Contact form. Name, email, company (optional), service of interest and message, used only to reply to your enquiry. Legal basis: your consent and pre-contractual steps (Art. 6(1)(a) and (b) GDPR). Processed via Web3Forms.

Analytics. With your consent, Google Analytics 4 (via Google Tag Manager) and Microsoft Clarity (heatmaps and aggregated, anonymized session recording). Legal basis: consent. Without consent, none of these load.

Form protection. hCaptcha to prevent spam and abuse. Legal basis: legitimate interest in security.

Retention

Contact enquiries are kept for up to 12 months after the last contact, then deleted, unless a contract begins or the law requires otherwise.

Recipients and international transfers

Processors: Web3Forms, Google (Analytics, Tag Manager), Intuition Machines (hCaptcha), Microsoft (Clarity) and the hosting provider. Some may process data outside the EEA (e.g. the US), under adequate safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

Cookies and consent

Only essential cookies load by default. Non-essential (analytics) cookies load only after you accept them in the consent banner. You can change or withdraw consent anytime via Cookie settings in the footer.

Your rights

You can access, rectify, erase, restrict and object to processing, request portability and withdraw consent at any time. You may also lodge a complaint with the Portuguese supervisory authority, the CNPD (www.cnpd.pt).