CrunchCode.
Legal

Privacy Policy

Effective Date: October 17, 2026 · Last Updated: October 17, 2026

CrunchCode LDA ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy applies globally to all visitors, users, and clients who access our website, read our blog, or submit inquiries through our lead and contact forms.

We process personal data in compliance with the European Union General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), applicable Portuguese data protection laws, and US state privacy regulations, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

1. Data Controller & Contact Information

The legal entity responsible for the processing of your personal data is:

If you have questions regarding this Privacy Policy or wish to exercise your legal privacy rights, please contact us at hello@crunchcode.com.

2. Information We Collect

We collect information directly from you when you interact with our website, as well as automatically through standard web technologies.

A. Information You Provide Directly

  • Contact & Lead Inquiry Forms: Name, work email address, phone number (optional), company name, and details regarding your project requirements.

B. Information Collected Automatically

  • Analytics Data (Google Analytics): Technical metadata including anonymized IP addresses, browser type, operating system, referring URLs, pages viewed, and session duration.
  • System & Security Logs: Standard server log data processed for network stability and cybersecurity.

3. Legal Basis for Processing (GDPR)

For individuals located in the European Economic Area (EEA) / UK, we process your personal data under the following legal grounds (Art. 6 GDPR):

  • Pre-contractual Measures (Art. 6(1)(b)): Responding to project inquiries and commercial quote requests submitted via contact forms.
  • Consent (Art. 6(1)(a)): Deploying non-essential analytics cookies (Google Analytics).
  • Legitimate Interests (Art. 6(1)(f)): Maintaining web security, optimizing website performance, and promoting our professional IT services.

4. Third-Party Services & Data Processors

We do not sell, rent, or trade your personal information. We share data only with authorized service providers who process data on our behalf under strict confidentiality agreements:

  • Google Analytics (Google Ireland Limited / Google LLC): Used for aggregate web traffic analysis. Analytics cookies are deployed only after user approval via our consent banner.
  • HubSpot, Inc. (CRM and form processing): Data may be processed in the United States under the EU-U.S. Data Privacy Framework.
  • Hosting & Infrastructure Providers: Secure cloud hosting located in ISO-certified data centers within the EEA or under recognized transfer frameworks.

5. International Data Transfers

When data is processed outside the EEA (e.g., via international analytics infrastructure), we ensure appropriate legal safeguards are in place, such as EU Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework.

6. Additional Notice for US and California Residents (CCPA/CPRA)

This section applies solely to residents of the United States, including California residents under the CCPA/CPRA.

A. Categories of Personal Information Collected

In the preceding 12 months, we have collected:

  • Identifiers: Name, email address, IP address, phone number.
  • Commercial Information: Inquiries regarding software development services and project specifications.
  • Internet/Network Activity: Interaction data via Google Analytics.

B. No Sale or Cross-Context Behavioral Sharing

CrunchCode LDA does not "sell" or "share" personal information for monetary or other valuable consideration, as those terms are defined under the CCPA/CPRA.

C. Your US Privacy Rights

US residents may have the following rights depending on their jurisdiction:

  • Right to Know / Access: Request disclosure of personal information collected about you in the past 12 months.
  • Right to Delete: Request deletion of personal information held by us.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Non-Discrimination: You will not receive discriminatory treatment for exercising any of your privacy rights.

To submit a request under US privacy laws, please email us at hello@crunchcode.com with the subject line "US Privacy Request."

7. Your Data Protection Rights Under GDPR (EEA/UK Residents)

If you are located in the EEA or UK, you hold the following rights under Chapter III of the GDPR:

  • Right of Access (Art. 15): Request a copy of your personal data.
  • Right to Rectification (Art. 16): Request correction of inaccurate data.
  • Right to Erasure (Art. 17): Request deletion of your personal data.
  • Right to Restrict Processing (Art. 18): Limit how we process your data.
  • Right to Data Portability (Art. 20): Receive your data in a structured, standard format.
  • Right to Object (Art. 21): Object to processing based on legitimate interests.
  • Right to Withdraw Consent: Revoke cookie consent at any time.

To exercise these rights, email hello@crunchcode.com.

You also have the right to lodge a complaint with the national supervisory authority in Portugal: Comissão Nacional de Protecção de Dados (CNPD), Av. D. Carlos I, 134 - 1.º, 1200-651 Lisboa, Portugal · Website: https://www.cnpd.pt

8. Data Retention

  • Form Inquiries: Retained for up to two (2) years from last contact, unless converted into an active contract.
  • Analytics Data: Retained according to Google Analytics settings (14 months) before automatic deletion.

9. Cookies & Preference Management

We use cookies to enable secure site operation and analyze traffic:

  • Essential Cookies: Required for basic site navigation and security.
  • Analytics Cookies: Deployed via Google Analytics only with your explicit consent via our cookie banner.

You can change or withdraw your choice at any time through the Cookie settings link in the footer, or as described in our Cookie Policy.

10. Updates to This Policy

We may update this Privacy Policy to reflect technical or legal changes. Updates will be published on this page with a revised "Effective Date."