Privacy policy

1. Who is responsible

The data controller is Bahaa Eddine Chaabane — Sole trader (Trabalhador Independente), trading as NEXORA — at Rua dos Estivadores, Lavra, 4455-127, Portugal, Portugal. This policy follows the EU General Data Protection Regulation (GDPR).

2. What we collect

• Details you enter in the quote or order forms: name, email, phone/WhatsApp, business name, project description, budget and timeline.
• Order and payment status. Card details are handled entirely by our payment provider, Stripe — we never see or store them.
• Basic technical data needed to run the site securely (e.g. IP address used for spam protection).

3. Why we use it

• To reply to your request and prepare a proposal (pre-contract steps).
• To deliver the service you paid for (contract).
• To keep accounting and tax records (legal obligation).
• To protect the site against abuse (legitimate interest).

We do not sell your data or use it for advertising.

4. Who we share it with

Only providers needed to run the service: website hosting and database, Stripe for payments, and WhatsApp when you choose to contact us there. Some may process data outside the EU under standard contractual clauses.

5. How long we keep it

Enquiries that don't become orders: up to 24 months. Order and invoicing records: as long as Portuguese tax law requires (generally 10 years).

6. Your rights

You can ask to access, correct, delete, restrict or export your data, or object to its use. You can also complain to the Portuguese data authority, CNPD (cnpd.pt).

7. Cookies

We only use storage strictly needed for the site to work (for example, remembering your language). No tracking or advertising cookies.

8. Contact

Contact: WhatsApp +351 935 676 419 · Email digitalnexorapt@gmail.com