Privacy Policy

Data controller

The controller responsible for processing the personal data collected through this website is Lyric, reachable at info@lyric.pt.

What data we collect and why

We only collect the data strictly necessary for the following purposes:

• Contact form. We ask for your name, email address, phone number (optional) and message, to respond to your quote or information request.
• Email communications. We keep the content of messages exchanged during the provision of the service.
• Browsing data. We collect anonymised technical information, such as IP address, browser type and pages visited, for security and website-improvement purposes, without personal identification.

We do not collect special categories of data (health, ethnic origin, political opinions, etc.) or data belonging to minors under 16.

Legal basis for processing

Processing of your data relies on the following legal bases under Article 6 of the GDPR:

• Performance of a contract or pre-contractual steps (Art. 6(1)(b)). Applies when processing is necessary to respond to your quote request or to provide the contracted service.
• Legitimate interest (Art. 6(1)(f)). Applies to IT security and website-improvement purposes, provided your fundamental rights and freedoms do not override it.
• Consent (Art. 6(1)(a)). Applies to sending marketing communications, if you give us that explicit permission.

Retention period

Data related to quote requests is kept for as long as needed to perform the contract and, after it ends, for the applicable legal limitation period (generally 3 years for general civil obligations, under Article 309 of the Portuguese Civil Code).

Anonymised browsing data is kept for a maximum of 12 months.

Sharing data with third parties

Your data is never sold, transferred or shared with third parties for commercial purposes. It may only be shared with:

• Hosting and infrastructure providers (e.g. Vercel, email servers), bound by data processing agreements that ensure GDPR compliance.
• Competent authorities, when required by law.

Your rights

Under the GDPR and Portuguese Law no. 58/2019, you have the following rights, which you can exercise at any time:

• Access. You can find out what data we hold about you.
• Rectification. You can correct inaccurate or incomplete data.
• Erasure (“right to be forgotten”). You can request deletion of your data, unless we're legally required to keep it.
• Portability. You can receive your data in a structured, machine-readable format.
• Objection. You can object to processing based on legitimate interest or for direct marketing purposes.
• Restriction. You can request a temporary suspension of processing in certain circumstances.

To exercise any of these rights, contact us by email at info@lyric.pt. We will respond within 30 days at the latest.

You also have the right to lodge a complaint with the competent supervisory authority in Portugal: the National Data Protection Commission (CNPD), available at www.cnpd.pt.

Cookies

We use technical cookies essential to the site's operation (theme and language preference) and, only with your prior authorisation, traffic-analysis tools. We do not use advertising or third-party social-network cookies. See our Cookie Policy for full details.

Security

We adopt appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction, in accordance with Article 32 of the GDPR.

Changes to this policy

We may update this policy periodically. The last-updated date is always shown at the top of this page. In case of material changes, we will notify by email anyone with an active contractual relationship with us.