These texts will evolve
- The website and the CORUZ tools are evolving: this text may change.
- The date of the last update is shown at the top of this page.
- Relevant changes are communicated here and, where applicable, by e-mail or in the application before they take effect.
- In CORUZ Control, when the terms or the applications privacy notice change, you will have to accept again to keep using it.
- Previous versions are available on request.
In short
- Who handles the data: Pedro Coruche, under the Coruz brand (Porto).
- What data: what you give me in the forms, the booking calendar (Cal.com) or by WhatsApp, email and LinkedIn.
- Why: to reply to you, book calls and, only with your consent, measure how the site is used.
- For how long: 1 year after the last contact (longer only where the law requires it, for example for invoicing).
- Your rights: access, rectification, erasure, objection, restriction and portability, at contact@coruz.pt. You can complain to the CNPD.
- CORUZ Control and CORUZ Process (with an account): see Apps privacy.
This policy explains how I collect and process the personal data of those who use the coruz.pt website and the contact forms. I aim to be clear and direct: if anything is unclear, write to me.
1. Who is the data controller
The controller of your data is Pedro Coruche, under the Coruz brand.
- Email: contact@coruz.pt
- Phone / WhatsApp: (+351) 925 156 160
- LinkedIn: linkedin.com/company/coruz
- Location: Porto, Portugal
2. What data I collect and why
I only collect the data you provide voluntarily through the contact form, for a single purpose: to reply to your message.
- Name: to know who I'm talking to.
- Email: to reply to you.
- Company (optional): to understand the context.
- Subject: the topic you choose (tools, audit or other), to route your request.
- Message: the content of what you want to tell me.
If you book a call, audit or demo through the site, I also receive the details you enter in Cal.com (name, email and, if you wish, a note), to prepare the conversation. If you message me on WhatsApp, I receive your number and the messages you send; if you write by email or LinkedIn, I receive the address or profile and the message.
The WhatsApp buttons on the site open the app with a message already written, which you can change or delete. Nothing is sent without your action. With your consent to analytics cookies, the site counts clicks on these buttons (and on the email and calendar ones) in aggregate, without personal data.
The two-week test on the Audit page is calculated in your browser: your answers are neither sent nor stored. Only if you choose to send it on WhatsApp does a summary of the result go out, written in the message, which you can edit before sending.
If you register your interest in CORUZ Control, I receive your name, your email, your company (if you give it), your answer about what you would like to control and the language of the page. They are used to reply to you and to understand what the tool should do first.
I do not collect sensitive data and do not build automated profiles of visitors.
3. On what legal basis
- Consent: only for analytics cookies, given in the cookie notice and withdrawable at any time.
- Legitimate interest: replying to a message you send me.
- Pre-contractual steps and legitimate interest: for the website forms, including the CORUZ Control interest form. The information note next to the send button explains how the data is used; there is no mandatory consent checkbox. You can ask for your data to be deleted at any time.
- Pre-contractual steps: when you book a conversation to explore a possible collaboration.
- Performance of a contract and legal obligations: if the conversation leads to a collaboration (proposal, contract and invoicing).
4. How long I keep it
I keep contact data for 1 (one) year from the last contact. After that period, it is deleted. If there is a collaboration, the data needed for the proposal, the contract and invoicing is kept for the period required by law (tax and accounting obligations).
CORUZ Control waiting-list data is kept until the tool is launched and for no more than 1 (one) year after you sign up. You can leave the list at any time by writing to the email above.
5. Who I share it with
I do not sell or rent your data. I share the bare minimum with providers who help me run the site and the apps:
| Provider | What for | Notes |
|---|---|---|
| Hostinger | Website hosting and sending the form email (send.php). | Contact and interest form data. |
| Google (Analytics) | Aggregated statistics on how the site is used. | Only with your consent (see the Cookie Policy). Google may process this data outside the EU, under the contractual clauses and the applicable data transfer framework. |
| Cal.com | The site booking calendar. | Loaded only after your click. It may process data outside the EU, under the applicable transfer framework. |
| WhatsApp (Meta) | Conversation by WhatsApp, if you choose to contact me that way. | The conversation is also subject to WhatsApp's privacy rules. |
| Supabase | The CORUZ Control and CORUZ Process apps (database, authentication and files). | Data in a European Union region; company headquartered outside the EU. See Apps privacy. |
6. Cookies and similar technologies
The site uses essential cookies (preferences) and, subject to your consent, Google Analytics cookies to understand and improve how the site is used. For full details and how to manage consent, see my Cookie Policy.
- I store your language preference (PT/FR/EN) in the browser's local storage. It does not identify or track anyone.
- Google Analytics uses cookies to measure visits in an aggregated way; you can disable it (see the Cookie Policy).
7. Your rights
Under the GDPR, you have the right to:
- Access the data I hold about you;
- Request the correction of inaccurate data;
- Request the erasure of your data;
- Object to or request the restriction of processing;
- Request the portability of the data you provided to me.
To exercise any of these rights, write to contact@coruz.pt. I reply within the legal deadline. You also have the right to lodge a complaint with the CNPD (the Portuguese data protection authority) or with the supervisory authority of your country of residence.
8. My commitment
- I do not sell your data.
- I do not use your data to train public AI models.
- I apply the principle of minimal access.
- The site runs over HTTPS and follows good security practices. Typefaces are hosted on the site itself (no requests to Google) and the Google Analytics script is only downloaded after you accept cookies.
- The forms have abuse protection: a temporary technical counter (IP address kept only as a hash, deleted after 1 hour at most) limits the number of requests. It is not used for anything else.
9. CORUZ Control and CORUZ Process apps
For people who use CORUZ Control or CORUZ Process with an account, and for the organisations that use them, the data handled, who decides what, where it is kept and for how long are in the Apps Privacy Policy. Whatever you send me through the site forms is handled as described in sections 2 to 5 of this page.
10. Changes to this policy
I may update this policy when the site or the law change. The version in force is always the one published on this page.