Privacy Policy

Last updated: 23.01.2026

This Privacy Policy explains how Palarrigim – Unipessoal LDA ("Company", "we", "us", or "our") collects, uses, and protects personal data when you visit https://extenso.io (the “Website”).

We are committed to protecting your personal data and complying with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Portuguese data protection laws.

1. Data Controller

Company: Palarrigim – Unipessoal LDA
Address: Alto da Bela Vista P74, Sulim Park, Agualva-Cacém, 2735-521, Lisbon, Portugal
Email: contact@extenso.io

2. Personal Data We Collect

We collect personal data only when you voluntarily provide it to us, in particular through the contact form on the Website.

This may include:

  • Name
  • Email address
  • Phone number (if provided)
  • Company name (if provided)
  • Message content
  • Any other information you choose to include

We do not intentionally collect special categories of personal data (sensitive data).

3. Purpose and Legal Basis of Processing

We process personal data for the following purposes:

  • To respond to inquiries and contact requests submitted via the contact form;
  • To communicate about requested IT or technology services;
  • To maintain business communication records.

Legal basis for processing:

  • Article 6(1)(b) GDPR – steps taken at the request of the data subject prior to entering into a contract;
  • Article 6(1)(f) GDPR – legitimate interests in responding to business inquiries;
  • Article 6(1)(a) GDPR – consent, where applicable.

4. Cookies and Technical Data

The Website may use strictly necessary technical cookies to ensure proper operation and security.

We do not use cookies for advertising or profiling purposes.

If analytical or third-party cookies are used in the future, this Privacy Policy will be updated accordingly and, where required, your consent will be requested.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations.

Contact form submissions are typically retained for up to 24 months, unless a longer retention period is required for contractual or legal reasons.

6. Data Sharing and Transfers

We do not sell or rent personal data.

Personal data may be shared only with:

  • Service providers (e.g. hosting or email providers), acting as data processors;
  • Public authorities, where required by law.

Where data is transferred outside the EU, appropriate safeguards under GDPR are applied.

7. Data Subject Rights

Under GDPR, you have the right to:

  • Access your personal data;
  • Request rectification or erasure;
  • Restrict or object to processing;
  • Data portability (where applicable);
  • Withdraw consent at any time (where processing is based on consent).

Requests may be submitted to contact@extenso.io. We will respond within the time limits established by law.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure.

However, no method of transmission over the Internet is completely secure.

9. Third-Party Links

The Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated “Last updated” date.

11. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Portuguese supervisory authority:

Comissão Nacional de Proteção de Dados (CNPD)
https://www.cnpd.pt

By using this Website, you acknowledge that you have read and understood this Privacy Policy.