Privacy Policy
This policy explains how we handle personal data when you visit kintal.app, request access to Kintal or contact us. We process data in line with the GDPR and Portuguese law. Where we process data on behalf of a customer under a data processing agreement, the customer is the controller and we are the processor; please address requests to that customer.
1. What we collect and why
- Contact and company details (name, email, phone, company, crew size, type of activity) submitted in the access-request and contact forms: to answer your request, prepare the trial and manage pre-contract steps.
- Technical data (IP address, browser type, server logs): to deliver the site, keep it secure and detect abuse. Operational logs are kept up to 30 days unless needed for a security investigation.
- Communications (emails and messages you send us): to provide support and keep adequate records.
We use no tracking cookies, no third-party analytics and no advertising. Fonts are served from our own domain, with no calls to Google servers.
2. Legal bases
Pre-contract steps and contract performance (access requests and support), legitimate interests (security and site operation), legal obligations, and consent where applicable (for example marketing communications, sent only with opt-in).
3. Processors
- Netlify, Inc. (USA): site hosting and form processing. Form submissions are stored by Netlify. International transfers are protected by EU Standard Contractual Clauses and applicable adequacy mechanisms.
- Hostinger: DNS management for the domain.
We do not sell personal data or share it for third-party marketing. We may disclose data to comply with legal obligations, protect rights and safety, or in connection with a business transaction under confidentiality safeguards.
4. Retention
Access requests and contacts: up to 12 months after the last interaction, unless a contract begins or a legal retention duty applies. Server logs: up to 30 days. Billing data: statutory periods.
5. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and to withdraw consent at any time. To exercise them, write to team@mutablep.com; we reply within 30 days. You may also complain to the Portuguese supervisory authority (CNPD).
6. Children
Our services are not directed to children under 16. If you believe a child provided us data, contact us and we will delete it.
7. Changes and contact
We may update this policy; the new version will be posted here with its date. Questions: Mutable Potential Lda (NIF 517017849) · R. Bernardo Santareno, n.º 27, Portugal · team@mutablep.com.