Privacy Policy

Last updated: 28 September 2026.

Who processes your data

The controller of the data collected through this website is Zelo Operações, Lda. For any question about privacy or to exercise your rights, you can reach us at geral@zelo-group.com.

What we collect

We collect only what you give us voluntarily, plus the minimum technical data needed to understand how you found us:

What you enter in the forms: name, company, email address, phone number and whatever message you write. In a meeting request we also collect your preferred date and time of day.
Source data: the page you were on when you submitted the request, the site that referred you, and any campaign parameters present in the address. This tells us which outreach efforts work.

Usage statistics, only if you accept: how you browse the site (pages viewed, clicks, scrolling, and your device and browser type), through Microsoft Clarity and Google Analytics. What you type in forms is hidden in these recordings. The cookies section explains this in detail.
Ad measurement, only if you accept: if you reached the site through one of our Google ads, Google Ads records that click and whether you then sent an enquiry or booked a meeting. It is used only to learn whether the ads work.

We collect no other data automatically, and we do not build profiles or make automated decisions about you.

Why we use it, and on what legal basis

To answer your request and prepare a possible proposal. The basis is the taking of steps at your request prior to entering into a contract, under Article 6(1)(b) GDPR.
To understand where enquiries come from. The basis is our legitimate interest in improving how the company communicates, under Article 6(1)(f) GDPR.
To understand how the site is used and improve it, through Microsoft Clarity and Google Analytics statistics. The basis is your consent, under Article 6(1)(a) GDPR, which you can withdraw at any time.
To learn whether our ads bring in enquiries, through Google Ads conversion measurement. The basis is your consent, under Article 6(1)(a) GDPR, which you can withdraw at any time.
To meet legal obligations of an accounting and tax nature, where the enquiry leads to a commercial relationship.

We do not use your data to send unsolicited commercial messages, and we do not sell or pass it to third parties for marketing purposes.

How long we keep it

If the enquiry does not lead to a commercial relationship, we keep the data for 24 months, so we have context if you come back to us, and delete it at the end of that period. If it leads to a contract, the data is kept for as long as the contractual relationship and the applicable legal obligations require.

Who has access

The data is accessed solely by the Zelo team. We rely on technology providers acting as processors, who handle the data only on our instructions:

Supabase — the database where requests are stored, on servers located in the European Union (Germany).
Vercel — hosting and delivery of the website.
An email delivery service — used only to notify us internally that a new request has arrived.
Cal.com — the calendar used to book meetings. The details you give when booking are processed by Cal.com to manage the booking.
Microsoft Clarity — usage statistics, only if you accept them. Microsoft may process this data outside the European Union under the EU-US Data Privacy Framework.
Google Analytics — statistics on visits and where they come from, only if you accept them. Google may process this data outside the European Union under the EU-US Data Privacy Framework.
Google Ads — conversion measurement for our ads, only if you accept it. Google may process this data outside the European Union under the EU-US Data Privacy Framework.

Cookies

This website does no remarketing and does not personalise ads based on your browsing. The only advertising-related cookie is Google Ads conversion measurement, and only with your consent.

Storage in your browser. We store your statistics choice in your browser and, only for the duration of your visit, the page you entered the site on and where the visit came from. This stays in your browser and only reaches us if you send a contact request or book a meeting.

Statistics (Microsoft Clarity), only with your consent. If you accept, Clarity sets cookies and records how you use the site: pages viewed, clicks, scrolling and technical device data. We use this only to understand what works and what confuses, and to improve the site. The content of form fields is hidden. According to Microsoft, session recordings are kept for up to 30 days and aggregated data for up to 13 months. More information in the Microsoft privacy statement.

Statistics (Google Analytics), only with your consent. If you accept, Google Analytics sets cookies (_ga and _ga_*, valid for up to 2 years) to count visits and understand where they come from and which pages are viewed. Advertising and ad-personalisation signals are turned off: this data is not used for advertising. More information in the Google privacy policy.

Ad measurement (Google Ads), only with your consent. If you accept, Google Ads sets cookies (_gcl_au, valid for up to 90 days, and cookies on Google's own domains) to link a click on one of our ads to an enquiry or booking made afterwards. It is not used to show you ads on other sites (remarketing) or to personalise ads. More information on Google's advertising page.

If you decline, none of Clarity, Google Analytics or Google Ads is loaded, and none of these cookies are set. You can change your choice at any time under "Cookie preferences", in the footer of any page.

If you subscribe to the blog newsletter, we only ask for your email address. The subscription only becomes active once you click the confirmation link we send you — known as double opt-in, which exists precisely so nobody can be subscribed without their knowledge. The basis is your consent, under Article 6(1)(a) GDPR, which you can withdraw at any time via the unsubscribe link in every email, with no need to justify it. Newsletter emails are sent through Resend.

Your rights

You have the right to access your data, to have it corrected, to request its deletion, to ask for processing to be restricted, to object to processing based on legitimate interest, and to receive the data you provided in a portable form. To exercise any of these, write to geral@zelo-group.com. We respond within one month at the latest.

If you believe the processing of your data breaks the law, you may complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados, at cnpd.pt.

Security

The site is served exclusively over an encrypted connection. Access to contact requests requires authentication and is limited to the Zelo team: the database access rules prevent any website visitor from reading data submitted by other people.

Changes to this policy

If we change this policy, the update date at the top of this page always reflects the version in force.