Privacy Policy
This privacy policy explains how Iron Custom Motors ("we", "us") collects, uses, and protects personal data of visitors and customers. We follow the EU General Data Protection Regulation (GDPR) and applicable Portuguese data-protection law.
1. Who we are
Data controller: Iron Custom Motors. Address: R. António José da Silva 100 B, 2785-253 São Domingos de Rana, Cascais, Portugal. Contact: [email protected], +351 917 961 230.
2. What data we collect
When you contact us by form, WhatsApp, phone, or email, we collect: name, phone number, email (optional), motorcycle details (brand, model, year), and the content of your message. When you visit this site we also collect technical data via analytics: browser type, device, country, pages viewed, referring page. Analytics data is only collected after you accept cookies.
3. Why we collect it
We use your contact details to reply to your request, prepare estimates, book service appointments, and follow up after a job. We use analytics to understand which pages help riders find us and improve the site. We never sell your data.
4. Legal basis
Processing of contact form data is based on your consent and on our legitimate interest in answering business enquiries. Service work and invoicing is based on the contract between us. Analytics is based on consent (cookie banner).
5. How long we keep it
Contact enquiries are kept for up to 24 months for follow-up and quality. Customer records (invoices, service history) are kept for the period required by Portuguese tax law (currently 10 years). Analytics data is retained for 14 months in Google Analytics.
6. Who has access
Your data is processed by Iron Custom Motors staff. We use the following third-party processors: FormSubmit (form delivery), Google Analytics 4, Meta Pixel (only after consent), Cloudflare (security/CDN for reviews widget), Google Maps (embedded map). Each processor handles your data under their own privacy terms.
7. International transfers
Some processors are located outside the EU/EEA (Google, Meta, Cloudflare in the US). Transfers rely on Standard Contractual Clauses (SCCs) and/or the EU-US Data Privacy Framework.
8. Your rights
You have the right to access, rectify, delete or restrict processing of your personal data; to data portability; to object to processing; to withdraw consent at any time; and to lodge a complaint with the Portuguese supervisory authority (CNPD — Comissão Nacional de Proteção de Dados).
9. How to contact us
To exercise any of the above rights, email us at [email protected]. We will respond within 30 days.
10. Changes
We may update this policy. The last update date is shown below.