Who the data controller is
Chaveiro 365, based in the Algarve, Portugal, is the controller of personal data collected through this website and our contact channels. For any privacy question, use the details on the contact page.
What we collect
This site has no forms and asks you for nothing in order to browse. The data we hold reaches us because you contacted us:
- Your name and phone number, when you call or message us on WhatsApp.
- The address or location of the job, so we can reach you.
- A description of the problem and, if you choose to send them, photographs of the door or lock.
- Billing details (name, address, tax number) when we issue an invoice, as required by law.
- Photo identification, checked in person to confirm you have the right to access the property or vehicle. It is verified on site and is neither copied nor filed.
Why, and on what legal basis
- To carry out the job you asked for — performance of a contract (Art. 6(1)(b) GDPR).
- To invoice and meet tax obligations — legal obligation (Art. 6(1)(c)).
- To confirm you are entitled to access the property or vehicle — legitimate interest in preventing improper access (Art. 6(1)(f)).
- To handle complaints and defend our position in a dispute — legitimate interest (Art. 6(1)(f)).
What we never do
We do not sell, rent or pass your data to third parties for marketing. We do not add you to a newsletter because you called. We do not keep copies of your identity document.
How long we keep it
- Billing records: 10 years, the period Portuguese tax law requires.
- Job history and guarantees: 2 years, matching the guarantee on parts fitted.
- WhatsApp messages and call records: up to 12 months, unless tied to a job still under guarantee.
- Photographs and insurance reports: for as long as the claim needs, then deleted.
Who we share it with
Only those essential to doing the work: our accountant, for tax purposes; your insurer, when they request a report and you authorise it; and the authorities, where legally required. WhatsApp is operated by Meta Platforms Ireland Limited, and messages you send through that channel are also subject to that company's privacy policy.
Cookies and measurement
This site uses no advertising or analytics cookies. There are no third-party cookies or trackers installed. Should we introduce measurement or advertising tools, a consent request will be shown first and this page will be updated before any collection begins.
Your rights
Under the GDPR you may, at any time and free of charge, ask us for: access to the data we hold about you, its correction, its erasure, restriction of processing, portability, and to object to processing based on legitimate interest. We will respond within 30 days at the latest.
If you feel we have not handled the matter properly, you have the right to complain to the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese supervisory authority.
Security
Data is accessed only by the technicians working on your job and by administrative staff. We keep no publicly accessible customer databases and we do not store card payment details.
Changes
If this policy changes, the update date at the top of this page changes with it. Material changes will be flagged clearly.