Who is responsible for your data
Fractals Cubed (Fractals³) is not a registered company. Your data is controlled jointly by its three founders, Samuel Lago Pedro, Júlio Medeiros and Francisco Correia, who all handle requests from this website. For any question about your data, or to exercise your rights, write to hello@fractalscubed.com.
What we collect
When you send the contact form, we collect:
- your name and email address;
- your company name, if you give it;
- your budget, timeline and areas of interest, if you choose them;
- your message;
- your consent, the page you sent the form from, the form language, and the date and time.
When you email us directly, we receive your email address and what you write.
When you visit any page, our hosting provider processes technical data, such as your IP address, browser type and the page requested, to deliver the site and protect it from abuse.
We do not use analytics, advertising or tracking cookies, and we do not build visitor profiles.
Why we use it and on what legal basis
- To reply to your request and prepare a free audit or a proposal. Legal basis: your consent, given with the checkbox on the form, and steps taken at your request before a possible contract (Article 6(1)(a) and (b) GDPR).
- To keep the form free of spam and the site secure. Legal basis: our legitimate interest in protecting the website (Article 6(1)(f) GDPR). Automated checks flag likely spam; flagged messages are kept for review and no decision is made about you.
- To keep records if you become a client. Legal basis: our legal obligations, such as accounting and tax rules (Article 6(1)(c) GDPR).
We need your name, email and message to reply. Everything else on the form is optional.
Who receives your data
We do not sell your data or share it for marketing. Only the Fractals³ team reads form submissions. We use these service providers, who process data only on our instructions:
- Cloudflare: hosts the website, stores form submissions, forwards emails sent to our address, runs the anti-spam check (Turnstile) and keeps short technical logs.
- Resend: sends the email that tells our team about a new request, and the replies we send you from our address.
- Google (Gmail): where our team receives requests and replies to you.
Transfers outside the European Union
Cloudflare, Resend and Google may process data outside the EU, including in the United States. These transfers rely on the safeguards required by the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep it
- Requests that do not lead to a project: deleted 12 months after our last contact with you.
- Messages flagged as spam: deleted within 3 months.
- If you become a client: what the contract needs, kept for as long as the law requires (for example, accounting records).
- Technical logs at our hosting provider: kept for no more than 7 days.
Information stored in your browser
If you switch between light and dark mode, the site saves that choice in your browser so it remembers it next time. It is not sent to us and is not used to track you.
On the contact page, Cloudflare Turnstile may store technical information in your browser to check that the form is being sent by a person.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. You can withdraw your consent at any time; this does not affect anything we did before. Write to hello@fractalscubed.com and we will reply within one month.
You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
Changes to this policy
If we change how we use your data, we will update this page and the date at the top.