Privacy Policy

Introduction

trueflowprois S.A. ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and protect your information when you visit our website or use our services. As a company based in Portugal and operating within the European Union, we comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller Information

The data controller for your personal information is:

Data Collection

We collect different types of information depending on how you interact with our services. The data we collect includes personal information you provide directly to us, information collected automatically through our website, and information from third-party sources where applicable.

Information You Provide

When you contact us, request our services, or interact with our website, we may collect:

• Contact information (name, email address, phone number)
• Business information (company name, business type, location)
• Communication preferences and enquiry details
• Any other information you choose to provide in forms or communications

Automatically Collected Information

When you visit our website, we automatically collect certain technical information including:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referral sources and search terms used

How We Use Your Information

We use your personal data for legitimate business purposes and only as described in this policy. The primary ways we use of your data include providing our services, improving our website and offerings, and communicating with you about our services.

Service Provision

• Responding to your enquiries and providing consultations
• Delivering our inventory management guidance services
• Processing and fulfilling service requests
• Providing customer support and assistance

Business Operations

• Improving our website functionality and user experience
• Analysing service usage and performance
• Developing new services and features
• Maintaining security and preventing fraud

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Legitimate Interest: For business operations, website analytics, and service improvement
• Consent: For marketing communications and optional data processing
• Contract: To provide services you have requested
• Legal Obligation: To comply with applicable laws and regulations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, their purposes, and how to control them, please see our Cookie Policy.

Data Sharing and Third Parties

We do not sell your personal information to third parties. We may share your information in the following limited circumstances:

• Service Providers: With trusted partners who assist in delivering our services
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Consent: With your explicit permission for specific purposes

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection principles.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of data and the purpose for which it was collected.

Generally, we retain:

• Contact and enquiry information for up to 3 years after last contact
• Service delivery data for the duration of our business relationship plus 7 years for legal compliance
• Website analytics data for up to 26 months
• Marketing consent records until consent is withdrawn plus 3 years for compliance purposes

Your Rights

Under GDPR and other applicable data protection laws, you have several rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing at any time

To exercise any of these rights, please contact us using the details provided below.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers operate. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions.

Children's Privacy

Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados) if you believe we have not handled your personal data in accordance with applicable law.