GDPR · Data Protection

Privacy Policy

Last updated: 5 November 2026

Ahurabi BI & Tech respects your privacy. This policy explains what personal data we collect through this website, what we use it for, how long we keep it and what your rights are, under the General Data Protection Regulation (Regulation (EU) 2016/679 — GDPR) and Portuguese Law No. 58/2019.

1. Data controller

2. What data we collect

We only collect the data you choose to give us in the contact and audit request forms:

• Name (first and last);
• Email address;
• Phone / WhatsApp number;
• Preferred date and time to be contacted;
• Any information you write in the notes field (for example, your company's current challenge).

Please do not include sensitive data in these fields (health, beliefs, bank details, etc.).

3. What we use the data for and on what legal basis

Purpose	Legal basis
Responding to your request and scheduling the call or audit you asked for	Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and your consent
Providing the contracted services and invoicing	Performance of a contract and compliance with legal obligations (Art. 6(1)(b) and (c))
Storing your cookie choice	Legitimate interest in respecting your preference (Art. 6(1)(f))

We do not sell or pass your data to third parties for marketing purposes, and we do not make automated decisions about you based on this data.

4. How long we keep the data

• Contact requests that do not lead to a contract: up to 12 months after the last contact, after which they are deleted.
• Clients: for the duration of the contract and then for the period required by law for tax and accounting purposes (currently 10 years for invoicing records).

5. Cookies and browser storage

This website does not use advertising cookies. The only thing we store, in your browser's local storage (localStorage), is your response to the cookie notice (accept or reject), so we don't ask you again on every visit.

To display fonts, icons, charts and some images, the website loads resources from external providers. When it does so, your browser shares your IP address and technical request data with those services:

• Google Fonts (Google Ireland Ltd.) — fonts;
• jsDelivr and unpkg — icon and chart libraries;
• Tailwind CSS CDN — page styles;
• Unsplash — some background images.

If traffic analytics tools are switched on in future, they will only be used with your consent and this policy will be updated.

Change my cookie choice

6. Who we share the data with

Your data may be processed by service providers that support us (website hosting, email, customer management tools), always under a contract that requires them to comply with the GDPR and only for the purposes above. If any of these providers processes data outside the European Economic Area, we ensure appropriate safeguards are in place (for example, the European Commission's standard contractual clauses).

7. Your rights

At any time and free of charge, you can:

• access your data and obtain a copy;
• ask for inaccurate data to be corrected;
• ask for your data to be erased (the "right to be forgotten");
• restrict or object to processing;
• ask for data portability;
• withdraw your consent, without affecting processing already carried out.

To exercise any of these rights, write to [email protected]. We will reply within 30 days at the latest.

You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD — Portuguese Data Protection Authority) — www.cnpd.pt.

8. Security

We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure, including an encrypted connection (HTTPS) and restricted access to information.

9. Changes to this policy

We may update this policy to reflect changes in the law or in our services. The date of the last update is always shown at the top of this page.