Legal
Privacy policy
Last updated 2026-09-23 · Versão em português
Short version
This page has no analytics, no ad trackers, and no cookies. The only personal data we ever see is what you send us directly — an email, or (once checkout is live) what a payment processor passes us to deliver your purchase. We are the data controller: Leonardo Filipe Baptista, trading as Hardside (see the legal notice).
What we collect and why
| When | What | Why |
|---|---|---|
| You email hello@hardside.shop | Your email address and whatever you write | To answer you. Kept as long as the conversation is relevant, then deleted. |
| You use the quote form | Your name, email, optional company, the service you picked and your message | To answer your request. Kept as long as the conversation is relevant, then deleted. Nothing is stored on the website — the form only forwards it to our inbox, apart from an anonymous per-visitor counter (a hash of the IP address, deleted after one hour) used to stop spam. |
| You hire a service | What the proposal needs (contacts, access you give us, data we process on your behalf) | To deliver the service. When we process personal data for you, a data processing agreement (art. 28 GDPR) defines what, why and for how long. |
| You visit any page | Technical server logs kept by our host (OVHcloud): IP address, date, page requested | Security and keeping the site running (legitimate interest). Managed by the host and deleted on its own schedule; we don't use them to profile anyone. |
| You buy something (once checkout is live) | Email, and payment confirmation from our payment processor — never your card number, which we never see | To deliver the product and issue an invoice, and to keep the invoice as long as Portuguese tax law requires (currently 10 years for commercial records). |
| You join the community Discord | Whatever Discord itself collects — see Discord's own privacy policy | Not ours to control; that's a separate service. |
Payment processing
Card and payment details are handled entirely by our payment processor, not by us — we never store or see your full card number. This page will name the processor and link to its own privacy policy as soon as checkout goes live.
What we don't do
- We don't sell or rent your data to anyone.
- We don't run analytics or tracking scripts on this site.
- We don't use your email for marketing unless you ask us to.
Your rights
Under GDPR, you can ask us — at hello@hardside.shop — to show you what we hold on you, correct it, or delete it. The one exception is anything Portuguese tax law requires us to keep (like an issued invoice), which we can't delete early. You can also complain to Portugal's data protection authority, the CNPD (cnpd.pt), if you think we've mishandled your data.