PRIVACY POLICY
1. Data Controller
Your personal data is processed by the following data controller:
ULTRAS-SITES — ultras-sites.com
Controller: TIAGO ALEXANDRE FERREIRA MOREIRA (Trabalhador Independente)
NIF: 306288230 · VAT: PT306288230
Address: Avenida Doutor João Carlos Noronha 38, 1.º Esq, 5360-302 Vila Flor, Portugal
Contact: contact@ultras-sites.com — Call Tiago
2. Data We Collect
We only collect strictly necessary data, and only when you choose to share it:
Through the contact form: your name, email address, phone number (if provided) and your message.
Technical browsing data: to measure the site's audience, we record the pages viewed, where the visit comes from (referring site, campaign parameters), approximate country and city, language, time zone, device, browser and connection type, time spent, scrolling, and clicks on buttons and forms (never what you type in them). Nothing is stored in your browser for this measurement: no cookie, no identifier, and your IP address is not recorded. Visits are grouped on our side, without ever linking two visits together. No advertising profiling.
Private contract link: if you open a contract link we sent you, the steps you take (opening, contract steps, leaving) are reported to us so we can help you. They are not linked to any other visit to the site.
3. Purposes
Your data is used solely to:
• Respond to your request for a quote, information or contact;
• Manage the commercial follow-up of our exchange;
• Improve the website through audience measurement without cookies or identifiers.
4. Legal Basis
Processing rests on two GDPR grounds:
Pre-contractual measures (Art. 6(1)(b)): when you fill in the form to request a quote or get in touch, processing is necessary to respond and prepare a possible collaboration.
Legitimate interest (Art. 6(1)(f)): following up our B2B relationship and improving our services, with full respect for your rights. Audience measurement also relies on this; you can object: if your browser sends a “Do Not Track” or “Global Privacy Control” signal, our measurement does not start.
5. Recipients
Your data is for the sole use of ULTRAS-SITES and is never sold, rented or shared with third parties for commercial purposes.
Technical processor: our host Cloudflare, Inc. provides hosting and message delivery, on our instructions and under strict confidentiality.
Messaging: form messages and contract-link alerts reach us through Telegram (Telegram Messenger Inc.).
6. Transfers Outside the EU
Our host Cloudflare, Inc. is based in the United States. Any transfer outside the EU is governed by appropriate safeguards (EU Standard Contractual Clauses and additional measures), per Articles 44 et seq. GDPR.
Telegram processes these messages under its privacy policy: data of accounts opened from the European Union is stored in the Netherlands.
7. Data Retention
Your contact data is kept as long as needed to handle your request, then for our business relationship, and for a maximum of 3 years from our last exchange. After that it is deleted or anonymised.
Visit statistics are kept for 3 months at Cloudflare, then deleted.
8. Your Rights
Under the GDPR you have the rights of access, rectification, erasure, restriction, objection and portability.
To exercise them, write to us at contact@ultras-sites.com.
You may also lodge a complaint with the competent authority: the CNPD in Portugal (www.cnpd.pt), the lead authority, or your own — the CNIL in France (www.cnil.fr) or the AEPD in Spain (www.aepd.es).
9. Security
We implement appropriate technical and organisational measures: encrypted connections (HTTPS), access restricted to authorised persons, and secure hosting.
10. Contact
For any question about this policy, write to us at contact@ultras-sites.com.
Requests for help getting started
If you ask me to contact you, I retain your email address or WhatsApp number, along with any name, business details and message you choose to provide. This information is used to assess your project and prepare a possible collaboration. It is stored with Cloudflare in Ultras-Sites business management. Telegram receives a notification with a reference, without your contact details or message.
The initial request and an unused contact record are automatically deleted after 12 months. If our relationship continues, information needed to manage it and business documents follow the retention periods applicable to that relationship and legal obligations. To limit form abuse, a temporary technical fingerprint of the IP address is retained, without the plain IP address, and erased within 24 hours.
The message bubble and calls from the site
Questions you type in the bubble are answered by an automated assistant (Workers AI, on the network of our host Cloudflare), limited to the information published on this site. It only responds if you write to it; your questions and its answers are kept in Ultras-Sites business management, where Tiago can read them, to follow the conversation.
“Talk to Tiago”: the first name, contact (email or phone) and message you choose to leave are stored with Cloudflare in Ultras-Sites business management; Tiago receives a Telegram alert (first name, contact and message) and a notification from his app, and his reply appears in your bubble. Legal basis: pre-contractual steps (Art. 6(1)(b) GDPR).
“Call Tiago”: the call goes directly between your browser and Tiago’s (WebRTC), encrypted between the two browsers; if a network relay is needed, Cloudflare passes on the encrypted stream without being able to listen to it. The microphone is only used during the call, after your permission. The call is not recorded: only the time, duration, language, page and any first name are kept; the technical connection data (including the IP addresses exchanged to set up the call) are deleted as soon as the call ends.
Messages, conversations and calls are deleted automatically after 12 months. To limit abuse, a technical fingerprint of the IP address (never the address itself) is kept for 48 hours at most. In your browser, the bubble stores nothing until you use it; from your first message or call, it keeps a random conversation identifier and your latest messages so you can pick up the thread from one page to the next. They disappear when you clear this site’s data in your browser.
Gestion app: access and resuming your work
In the private Gestion workspace, your browser stores this device’s authorisation and security keys, along with your appearance preferences. This information protects your workspace and enables its features; it is not used for audience measurement.
To resume your work after unlocking, Gestion keeps an encrypted record on this device of your last screen, scroll position and edited fields. It expires after twelve hours of inactivity and is then deleted the next time you open the app. Explicitly signing out also deletes it. Resuming a draft does not automatically send or save your changes to the company’s records.
Passwords, signatures and selected files are not kept in this record. Clearing this site’s data in your browser also removes the local device authorisation, so you may need to authorise the device again.
