How Portesca AI handles personal data
A clear, general draft explaining what data is collected through this website, why it is used, and the choices available to you. Please review and adapt it to your actual practices.
In plain language, without legal conclusions.
Requests, retention and cookies.
Only what is needed to operate the site.
Use contact.html for privacy requests.
Privacy Policy for Portesca AI
This is a general starting template. Replace bracketed text, confirm your actual data flows with your team, and seek independent legal advice before relying on it.
Our approach in plain terms
Portesca AI operates an informational website about data analysis and decision-support tooling. We aim to collect as little personal data as possible, use it only for stated purposes, and retain it only as long as needed.
- This page describes categories of data, purposes, retention, sharing, and individual rights in general terms.
- Where specific details depend on your setup — for example analytics, hosting, or contact forms — [insert accurate details].
- For any privacy question or request, please use the contact page rather than sharing sensitive data by other means.
Contents: 1. Scope & controller · 2. Data we collect · 3. Purposes & use · 4. Cookies · 5. Sharing · 6. Retention & security · 7. Rights & choices · 8. Changes & contact
1–6: Collection, use, cookies, sharing and storage
1. Scope and controller SEC. 01
This Policy applies to personal data processed when you visit this website, browse its pages, or contact us via the contact page. [Insert controller legal name, contact details, and, if applicable, data protection contact]. If you do not yet have these details finalised, leave as [To be confirmed] and do not publish until complete.
- Applies toWebsite use
- Not coveredThird-party sites
2. Personal data we collect SEC. 02
We process only the data that is actually provided or technically necessary. Depending on your configuration, this may generally include:
a) Data you provide: name, email address and message content when you submit a form or contact request. b) Technical data: IP address, device and browser type, pages viewed, and basic log data needed for security and operation. c) Preferences: language, region or cookie choices where enabled. We do not intentionally collect sensitive categories or financial credentials through this site. Please do not submit API keys, passwords, or other secrets via forms.
- SourceDirect + automatic
- Sensitive dataNot requested
3. Purposes and legal bases — general description SEC. 03
We use personal data only for the purposes described below. The applicable legal basis depends on your circumstances and location and should be confirmed with counsel:
— To operate, maintain and secure the website. — To respond to enquiries and provide requested information. — To improve content and understand aggregate usage, where analytics are enabled. — To comply with legal obligations and enforce terms, where applicable. — To obtain consent for optional cookies or communications, where required. Do not treat this list as a legal determination. [Insert or confirm the lawful basis you rely on for each purpose].
- MarketingOnly if enabled
- Automated decisions[Confirm / None]
4. Cookies and similar technologies SEC. 04
This site may use strictly necessary cookies for core functionality and, only where enabled, optional analytics or preference cookies. [Insert cookie list: name, provider, purpose, duration, and how to manage them]. You can control cookies through your browser settings and, where a consent tool is provided, through that tool. Blocking some cookies may affect site functionality.
- NecessarySite operation
- Optional[Confirm use]
5. Sharing and processors SEC. 05
We do not sell personal data. Data may be handled by service providers strictly to operate the website — for example hosting, security, or form delivery — acting on our instructions. [List categories of recipients actually used, e.g., hosting provider, email service]. We may disclose data where required by law or to protect rights, safety, and security. We do not authorise processors to use data for their own purposes.
- Sale of dataNo sale
- DisclosureLegal / security only
6. International transfers, retention and security SEC. 06
Transfers: Where data is stored or processed in another country, [describe location(s) and safeguards relied upon after advice, or mark as To be confirmed]. Retention: We keep personal data only as long as needed for the purposes above — for example, correspondence is kept for [insert period] and logs for [insert period] — unless longer retention is required by law. Security: We apply general technical and organisational measures such as access controls, encryption in transit where supported, and minimisation. No method is fully secure, and we cannot guarantee absolute security.
- Retention[Insert periods]
- SecurityReasonable measures
This section is a general draft. It does not describe jurisdiction-specific transfer mechanisms, retention rules, or security standards. Adapt it with qualified advice to match your hosting, providers, and legal obligations.
7–9: Your rights, children, changes and contact
Depending on where you are located, you may have certain rights over your personal data. How those rights apply depends on applicable law and should be confirmed with counsel.
To exercise a right or ask a privacy question, please use the contact page and include enough detail for us to locate your request without sending sensitive information. We may need to verify identity before responding. [Insert expected response timeframe after advice].
7. Individual rights — general overview
Subject to applicable law, you may have the right to request access, correction, deletion, restriction, portability, or objection to certain processing, and to withdraw consent where consent was the basis. These rights are not absolute and may be subject to exceptions. We will consider each request in line with applicable requirements and explain the outcome. To submit a request, use contact.html. Please do not include passwords, keys, or financial details.
8. Children and third-party links
This website is intended for a general adult audience and is not directed to children. We do not knowingly collect data from children through this site. If you believe a child has provided data, contact us so we can review. This site may link to third-party websites. Their privacy practices are their own; review their notices before providing data.
9. Changes to this Policy and contact
We may update this Policy to reflect changes in our practices or for operational or legal reasons. The version published here will show [insert date/version method]. Material changes will be indicated by [describe method, e.g., updating the date above]. Continued use after an update indicates acknowledgement of the revised version as described here. For questions about this Policy, use contact.html. [Insert controller contact details once verified].
Do you use this site for regulated advice or guarantees?
No. Portesca AI provides general information and tooling descriptions. Nothing on this site is investment advice and no outcome is guaranteed. Any personal data you share should be limited to what is needed to handle your enquiry.
Before publishing, confirm these points
Make this draft your own
Do not publish with bracketed placeholders. Verify each item with the people who operate the site and hosting.
- Controller identity, contact, and any data protection contact
- Actual data fields, purposes, analytics, and cookie inventory
- Providers, storage locations, retention periods, and request handling
Legal review
Seek independent legal advice on lawful bases, notices, consents, and rights procedures for your audience.
Operational check
Align the text with form fields, consent tools, logs, and provider contracts actually in use.