Privacy Policy
This privacy policy explains how Iron Custom Motors ("we", "us") collects, uses, and protects personal data of visitors and customers. We follow the EU General Data Protection Regulation (GDPR) and applicable Portuguese data-protection law.
1. Who we are
Data controller: Iron Custom Motors. Address: R. António José da Silva 100 B, 2785-253 São Domingos de Rana, Cascais, Portugal. Contact: [email protected], +351 917 961 230.
2. What data we collect
When you contact us by form, WhatsApp, phone or email, we receive the details you provide, such as your name, contact details, motorcycle details and message. Cloudflare Web Analytics provides aggregate traffic and performance information without analytics cookies. Separate contact-action counters record daily totals by action type, page and language. They do not store form content, IP addresses, browser identifiers or individual event records. Hosting and security providers may process request data, including IP addresses, to deliver and protect the site.
3. Why we collect it
We use your contact details to reply to your request, prepare estimates, book service appointments, and follow up after a job. We use analytics to understand which pages help riders find us and improve the site. We never sell your data.
4. Legal basis
Processing of contact form data is based on your consent and on our legitimate interest in answering business enquiries. Service work and invoicing is based on the contract between us.
5. How long we keep it
Contact enquiries are kept for up to 24 months for follow-up and quality. Customer records (invoices, service history) are kept for the period required by Portuguese tax law (currently 10 years). The separate daily contact-action counters expire 400 days after their last update; they contain totals rather than customer records.
6. Who has access
Iron Custom Motors staff handle your enquiries. Website providers include FormSubmit for form delivery, GitHub Pages for hosting, Cloudflare for delivery, security, aggregate analytics and review/contact-action services, and Google for fonts, maps and embedded YouTube videos. If you choose WhatsApp, that communication is also handled by WhatsApp. Provider processing is governed by their respective privacy terms.
7. International transfers
Some processors are located outside the EU/EEA (Google, Meta, Cloudflare in the US). Transfers rely on Standard Contractual Clauses (SCCs) and/or the EU-US Data Privacy Framework.
8. Your rights
You have the right to access, rectify, delete or restrict processing of your personal data; to data portability; to object to processing; to withdraw consent at any time; and to lodge a complaint with the Portuguese supervisory authority (CNPD — Comissão Nacional de Proteção de Dados).
9. How to contact us
To exercise any of the above rights, email us at [email protected]. We will respond within 30 days.
10. Changes
We may update this policy. The last update date is shown below.