1. Data controller
The Novyst website is operated by João Gonçalo Martins, NIF 219413410, independent professional, Lagos, Portugal. For questions about your data, contact geral@novyst.com.
2. Enquiries and contacts
We process your name, email, company, enquiry and, where supplied, country, website, sector, goals, budget, timing and attachments to respond and prepare a proposal. The basis is taking pre-contractual steps at your request or our legitimate interest in responding to professional enquiries. Enquiries are stored privately and confirmation and notification emails may be sent.
3. Interest lists
When you join an interest list, we store your name, email, source project, language and consent date. We use these details only for information about the selected project, based on consent. You can withdraw consent through the contact above without affecting earlier processing. Business enquiries are not automatically subscribed to newsletters.
4. Technical data and analytics
We use a necessary session for form security and administrative authentication. Rate-limit records use a key derived from the IP address and are removed after their relevant interval. Hosting may maintain technical security logs. With consent, Google Analytics measures pages and contact, product and accepted-submission events. Names, emails, attachments, messages and search terms are not sent to Analytics. Campaign parameters may be associated with an enquiry when analytics is allowed.
5. Providers and recipients
The existing hosting provider is KnownHost. The configured SMTP provider processes email delivery. Google processes analytics when allowed. WhatsApp and product websites have their own policies. Some providers may process data outside the European Economic Area, subject to applicable safeguards such as an adequacy decision or standard contractual clauses. You can request details of the providers and safeguards used.
6. Retention
Enquiries without a contractual relationship and interest lists are retained for up to 180 days, unless justified follow-up or renewed consent is necessary. Administration includes retention-based deletion. If an enquiry leads to a contract, retention follows that relationship and legal obligations. Attachments follow the enquiry’s retention period. Analytics preferences expire after 180 days; language and theme choices are stored for up to one year.
7. Rights and complaints
You may request access, correction, erasure, restriction, portability or object, where applicable. You can withdraw analytics consent in “Cookie settings”. Identity verification may be needed to protect data. You may also complain to the Comissão Nacional de Proteção de Dados.
8. Choice and automated decisions
Analytics consent is not required to browse or contact us. Without necessary details, we may be unable to respond. This website does not use data for solely automated decisions with legal or similar effects. This policy covers this website; products have their own policies.
Updated 19 September 2026.