Privacy and data protection

Privacy Policy

MoldCheck.pt privacy policy under the GDPR, Portuguese Law 58/2019 and Law 41/2004, covering contact flows, payments, newsletter, gated free downloads and necessary cookies.

Last updated: 10 March 2026

2. What data we collect

2.1

Data you provide directly

Contact form or email enquiries: — Email address — Name (optional) — Message content

Purpose: to respond to your message. Legal basis: consent (Article 6(1)(a) GDPR). Retention: 12 months after the last communication, unless a longer legal retention obligation applies.

Newsletter subscription: — Email address — Preferred language — Subscription date

Purpose: sending editorial updates about mold, damp, and indoor air quality in Portugal. Legal basis: consent (Article 6(1)(a) GDPR). Retention: until unsubscribe + 30 days for technical processing.

Free content download (PDF / checklist): — Email address

Purpose: delivering the requested document and automatically entering the user into the email sequence associated with that downloaded resource. Legal basis: consent and/or performance of pre-contractual or contractual steps, as applicable.

Purchases, bookings, or payments (if applicable): — Name — Email address — Data necessary to complete the booking or purchase — Limited transaction information

Payments are processed by third-party payment providers such as Stripe. MoldCheck.pt does not store full payment card details.

2.2

Automatically collected data

Traffic analytics (Plausible Analytics): MoldCheck.pt uses Plausible Analytics, an analytics tool that uses no cookies, collects no personally identifiable data, and creates no user profiles.

Data collected may include: pages visited, approximate country, referrer URL, and device type. None of this data is personally identifiable.

Plausible does not require consent under the GDPR or Portuguese Law 41/2004 because it does not process personally identifiable data.

Necessary cookies: — Language preference cookie: stores the user’s selected language. Duration: 365 days. No consent required. — Session cookie: technical session management. Duration: session. No consent required.

We do not use advertising cookies, third-party tracking cookies, social media pixels, or analytics tools that collect personal data without consent.

3. Sharing data with third parties

3. Sharing data with third parties

We do not sell, rent, or transfer your personal data to third parties for marketing purposes.

Your data may be shared with:

Technical service providers (data processors under Article 28 GDPR), such as:

website hosting provider

email / newsletter platform

Plausible Analytics

Stripe or other payment providers

other suppliers strictly necessary to operate bookings, downloads, or forms

Legal authorities: we will disclose personal data to competent authorities if legally required to do so (Article 6(1)(c) GDPR).

4. International data transfers

4. International data transfers

Personal data is processed preferably within the European Union. Where a service provider processes data outside the EU/EEA, we ensure that either:

a European Commission adequacy decision is in place, or

Standard Contractual Clauses (SCCs) approved by the European Commission are in force.

5. Your rights

5. Your rights

Under the GDPR and Portuguese Law 58/2019, you have the following rights:

right of access

right to rectification

right to erasure

right to restriction of processing

right to data portability

right to object

right to withdraw consent at any time

To exercise any of these rights: info@moldcheck.pt

We will respond within 30 days. In complex cases, this may be extended to 60 days, and you will be informed of the extension.

6. Right to lodge a complaint

6. Right to lodge a complaint

If you believe our processing of your personal data violates the GDPR, you have the right to lodge a complaint with:

CNPD — Comissão Nacional de Protecção de Dados Rua de São Bento, n.º 148, 3.º 1200-821 Lisbon Portugal www.cnpd.pt

geral@cnpd.pt

You may also lodge a complaint with the supervisory authority in your country of residence, where applicable.

7. Security

7. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction, including encrypted transmission (HTTPS/TLS), access controls, and regular backups.

No system is absolutely secure. In the event of a data breach posing risk to individuals, we will notify the CNPD within the applicable legal timeframe and, where necessary, affected individuals without undue delay.

8. Children

8. Children

This website is not directed at persons under 16 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with data, we will delete it as soon as reasonably possible.

9. External links

9. External links

This website contains links to external websites, including InspectOS.pt and PropCheck.pt. We are not responsible for the privacy practices of those websites. Please consult their respective privacy policies.

10. Changes to this policy

10. Changes to this policy

We may update this policy. The date of the latest update is shown at the top of this page. In the event of material changes, we will publish a visible notice on the website.

11. Contact

11. Contact

For any question about this policy or about the processing of your data: info@moldcheck.pt

Privacy Policy — MoldCheck.pt — MoldCheck