Skip to content

Privacy Policy

This Privacy Policy explains how NexoFlow ("we", "us", or "our") collects, uses, and protects personal data when you visit nexoflow.pt or engage our services. We are committed to processing personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Portuguese data protection law.

1. Data Controller

NexoFlow is the data controller responsible for your personal data. For any questions about this policy or your data, contact us at g.fernandes@nexoflow.pt.

2. What Data We Collect

We collect only the data we need to respond to enquiries and deliver our services:

  • Contact details you provide through forms on our website — typically your name, business email address, company name, and message content.
  • CRM records stored in HubSpot, our customer relationship management platform, relating to our communications and engagements with you.
  • Technical and usage data such as IP address, browser type, and pages visited, collected automatically through cookies and similar technologies.

3. How We Use Your Data

We process personal data to respond to enquiries and booking requests; provide, manage, and improve our consulting and Asana licensing services; communicate with you about projects, support, and relevant updates; and meet our legal, accounting, and contractual obligations.

4. Legal Basis for Processing

We rely on the following legal bases under the GDPR: your consent (for example, when you submit a contact form), the performance of a contract with you, our legitimate interests in operating and growing our business, and compliance with legal obligations.

5. Data Sharing

We do not sell your personal data. We share it only with trusted service providers who help us operate our business — including HubSpot (CRM and website hosting) — and only to the extent necessary. These providers are bound by data processing agreements. Where data is transferred outside the European Economic Area, we ensure appropriate safeguards such as Standard Contractual Clauses are in place.

6. Data Retention

We keep personal data only for as long as necessary for the purposes set out above. Enquiry and CRM data is generally retained for up to 24 months after our last contact with you, unless an ongoing client relationship or legal obligation requires a longer period. Accounting records are retained for the period required by Portuguese law (typically 10 years).

7. Your Rights

Under the GDPR, you have the right to access, rectify, or erase your personal data; to restrict or object to its processing; to data portability; and to withdraw consent at any time. To exercise any of these rights, email g.fernandes@nexoflow.pt. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).

8. Cookies

Our website uses cookies to function correctly and to understand how visitors use the site. You can control or disable cookies through your browser settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with its effective date.

If you have any questions about how we handle your personal data, please contact us at g.fernandes@nexoflow.pt.