Privacy Policy

Fylux Digital Solutions operates as a trade name/brand. Full legal entity details are provided in proposals, contracts, and invoices.

For privacy questions, contact: hello@fyluxds.com.

This Policy applies to the website, client portal, applications, and related services, including contact requests, project management, and commercial communications.

We may collect contact data (name, email, phone), business data (company, tax ID), authentication data, and technical data (IP, browser, device, logs).

We also collect portal usage information for security, audit, and service improvement.

Data is typically provided directly by the user in forms, emails, or during project delivery.

Users are responsible for ensuring they have the rights to share provided data.

We may automatically collect technical data such as access logs, device identifiers, and performance information.

These data are used for security, diagnostics, and continuous improvement.

We do not request or intend to process sensitive personal data. If sensitive data processing is required, additional safeguards must be agreed in writing.

We process data to respond to requests, deliver services, manage contracts and payments, ensure security, prevent fraud, and improve user experience.

We may also use data for operational and commercial communications when permitted by law.

We process data based on contract performance, pre-contractual steps, legitimate interests, legal obligations, and consent where applicable.

Consent may be withdrawn at any time without affecting prior processing.

We may use usage data to personalize the experience and improve features where allowed.

We do not carry out automated decisions with significant legal effects without human involvement unless explicitly stated.

We use essential cookies to operate the site and portal. Non-essential cookies (e.g., analytics, preferences) are used only with consent.

You can manage choices via the cookie banner and your browser settings.

Essential: required for basic functionality and security.

Preferences: remember user choices, such as language.

Analytics and Marketing: used only with user consent.

We use providers to operate the service, including Supabase (database), Vercel (hosting), and Resend (email delivery).

These processors act only under our instructions and pursuant to data processing agreements.

Data may be transferred outside Portugal or the EEA. In such cases, we use appropriate safeguards such as Standard Contractual Clauses and supplementary measures.

We retain data only as long as necessary for the purposes described or to meet legal obligations.

Contact requests may be retained for commercial history and audit.

We implement appropriate technical and organizational measures such as encryption, access control, MFA, and incident monitoring.

No system is fully risk-free; we recommend good security practices.

In case of an incident, we take measures to mitigate impact and, when required by law, notify authorities and data subjects.

Under GDPR, you have the right to access, rectify, erase, restrict, object to processing, and request portability.

To exercise rights, contact us via the email above. You may also lodge a complaint with your data protection authority.

Services are intended for users aged 18 or older. We do not knowingly collect data from minors.

We may send operational communications related to services. Marketing communications are sent only when permitted by law or with consent.

We may disclose data if required by law, court order, or competent authority.

Our website may contain links to third-party sites. We are not responsible for their privacy practices.

We operate in Portugal, serve international clients, and plan EU expansion. Different legal requirements may apply depending on the client country.

We may update this Policy periodically. The "Last updated" date indicates the current version.

For questions about this Policy, contact: hello@fyluxds.com.