Who is responsible
Nemorax is responsible for the personal data described here. This policy covers this website and related enquiries. For privacy matters, contact Info@nemorax.com.
Business address
Business registration
Tax identification
Data protection contact and representation
Information we handle
The enquiry form asks for your name and email address; both are required to send it. Organisation and message are optional. The form also includes the page language, English or Portuguese. We also receive information you include in direct email correspondence.
Contact-form security uses the request IP address, an IP-derived identifier, successful-request timestamps, a hidden anti-spam field and elapsed time since the form opened. Website delivery and security can involve connection and access records handled by the hosting service.
Why we use information
We use enquiry details to answer and follow up your request. Submitting the form does not subscribe you to a marketing list or send your enquiry to another business as a sales lead.
Where GDPR applies, website operation, security and handling business enquiries rely on our legitimate interests in maintaining a secure website and responding to requests. If you personally request steps towards a contract with you, necessary processing instead relies on those pre-contractual steps. Providing information for an ordinary enquiry is voluntary; without the required contact details we cannot send the form or reply.
Who handles the data
Enquiries are handled by authorised people and hosting and email service providers supporting website operation and message delivery. Access is limited to the relevant task. Information can also be disclosed where a legal obligation requires it or where necessary to establish, exercise or defend a legal claim.
Where data are processed
Website hosting: Namecheap, Amsterdam, Netherlands.
International transfer safeguards
Integrated external services
How long we keep information
Enquiries that do not lead to an engagement are deleted or anonymised 12 months after the last substantive exchange. Automatic acknowledgements do not restart that period.
Routine website access and security logs are kept for up to 30 days. IP-derived anti-spam records are deleted within 24 hours. Specific incident evidence is retained separately only while investigating that incident or while a documented legal hold applies.
If an enquiry becomes a client engagement, only correspondence needed for it is kept with client records through the engagement and applicable statutory retention periods. Dispute or legal-obligation holds cover only necessary records and end when their documented reason ends.
Deleted records leave rolling backups within a further 30 days. Backups are restricted to recovery; deletions are reapplied after restoration.
Your privacy rights
Depending on applicable law and the circumstances, you can request information, access, correction, deletion, restriction or portability of personal data. These rights have conditions and exceptions. Where processing relies on consent, you can withdraw it at any time without affecting earlier lawful processing.
Right to object
Where GDPR applies, you can object on grounds relating to your situation to processing based on legitimate interests, and object at any time to direct marketing.
Requests and deletion
Email Info@nemorax.com to exercise a right or request deletion. Include enough information to locate your data, such as the address used for your enquiry. No special wording or form is required. We request only proportionate identity information where necessary, respond within applicable legal time limits and explain any lawful reason for retaining relevant data.
Questions and complaints
You can raise concerns with us or a competent authority, including Comissão Nacional de Proteção de Dados (CNPD) where it has jurisdiction. Where GDPR applies, you may also complain to the authority for your habitual residence, place of work or the alleged infringement.
Changes to this policy
Updates are published here. We provide additional notice of new purposes or material changes where required by law.