Draft — requires final legal review before publication.
Privacy notice
Last updated: 28 September 2026
Legal details
- Website operator
- Nuno Garcia, founder of LusoTrace
- Country
- Portugal
- Legal entity name
- [To be added after incorporation]
- Registered address
- [To be added after incorporation]
- Company registration
- [To be added after incorporation]
- VAT / NIF
- [To be added after incorporation]
- Contact
- privacy@lusotrace.com
LusoTrace is not yet incorporated. Until it is, this website is operated by its founder. Company details will be added here after incorporation.
This notice explains what personal data LusoTrace collects through lusotrace.com, why, how long it is kept and the rights you have under the GDPR. We collect as little as possible.
01Who is responsible
The controller is the website operator identified in the legal details on this page. For any privacy question, or to exercise your rights, write to privacy@lusotrace.com.
02What we collect
Pilot request form: name, company, work email, role (optional), commodity, main challenge and your message (optional).
Technical data: our hosting provider processes technical request data, such as IP addresses in server logs, to operate and secure the website.
We do not use analytics, advertising or tracking technologies on this website.
03Why we use it, and on what basis
To reply to your request and, where relevant, to discuss a pilot — steps taken at your request before a possible contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR).
To keep the website secure and available — our legitimate interest (Art. 6(1)(f) GDPR).
We do not use your details for marketing and do not add you to any mailing list.
04Processors and providers
Website hosting: Vercel Inc.
Email delivery of pilot requests to pilot@lusotrace.com, once enabled: a transactional email provider (Resend).
Providers act as processors under data processing agreements. Where data is transferred outside the European Economic Area, appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision apply. [Confirm providers and transfer mechanisms before publication.]
05How long we keep it
Request data is kept for as long as needed to handle the conversation and any resulting relationship, and deleted when no longer necessary — by default no later than 24 months after our last contact. Server logs are kept by the hosting provider for a limited period. [Confirm retention periods.]
06Your rights
You may request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interest. Write to privacy@lusotrace.com; we reply within one month.
You may also lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.
07Security
The website is served over HTTPS with restrictive security headers. Access to request data is limited to the people who need it to reply.