Skip to content
Goatify

Privacy Policy

Version dated 3 November 2026

Preliminary text. This page has not yet had legal review. It must be reviewed and approved by a qualified lawyer before the website is published.

1. Who is responsible for your data

The data controller is GOATIFY, LDA., NIPC 518765652, Rua Mouzinho da Silveira, n.º 32, 1250-167 Lisboa, Portugal. Privacy requests can be sent to contact@goatify.pt.

2. What we collect

  • Contact form: full name, company name, business email, country, partnership type and message.
  • Technical data: IP address and request details, used to deliver the website and protect the form.

Please do not include sensitive personal data or payment data in the form.

3. Why we use it, and on what legal basis

  • To reply to your inquiry and hold pre-contractual discussions: Article 6(1)(b) GDPR, where applicable, or our legitimate interest under Article 6(1)(f) GDPR in handling business contacts.
  • To secure the website and prevent spam: our legitimate interest under Article 6(1)(f) GDPR.
  • To meet legal obligations, where they apply: Article 6(1)(c) GDPR.

4. Who receives it

We use service providers that act on our behalf:

  • Lovable, which runs on Cloudflare infrastructure, for website hosting. [HOSTING PROVIDER: TO CONFIRM IN LEGAL REVIEW]
  • Resend, for delivering contact form messages.
  • Cloudflare, for the Turnstile security check on the contact form.
  • [EMAIL HOSTING PROVIDER: TO CONFIRM], for our business mailbox.

We do not sell personal data.

5. International transfers

Some providers may process data outside the European Economic Area. Where they do, transfers rely on a mechanism recognized by the GDPR, such as an adequacy decision or standard contractual clauses. [TO CONFIRM FOR EACH PROVIDER]

6. How long we keep it

We keep contact messages for [RETENTION PERIOD: TO CONFIRM], unless a longer period is required to continue a business relationship or meet a legal obligation.

7. Your rights

You can ask for access, rectification, erasure, restriction or portability of your data, and you can object to processing based on legitimate interest. You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).

8. Automated decisions

We do not make decisions with legal or similarly significant effects based solely on automated processing of your data.

9. Changes

We may update this policy. The version date at the top of this page shows when it last changed.