Privacy policy

Last updated 23 June 2026.

This policy explains what personal data ParallelCascade collects, why we use it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR) and Portuguese data-protection law. We keep data collection to the minimum needed to answer your enquiry.

1. Who is responsible for your data

The data controller is ParallelCascade Unipessoal, Lda., a company established in Portugal. For any privacy request or question, contact us through the contact form and state that your message concerns data protection.

2. What we collect

Contact form. When you use the contact form we process the name, email address, optional organisation, chosen topic and the message you write.
Intake assistant. If you use the assistant on a branch page, we process the messages you type and any contact details (email or phone) you choose to share so a person can follow up.
Technical data. To keep the service available and prevent abuse, our server temporarily processes your IP address and request metadata for rate limiting and security. We do not build advertising or behavioural profiles.

3. Why we use it, and our legal basis

To answer your enquiry and take steps before any engagement. Legal basis: performance of, or steps prior to, a contract (GDPR Art. 6(1)(b)), and our legitimate interest in responding to business enquiries (Art. 6(1)(f)).
To run the assistant and deliver your message to us. Legal basis: our legitimate interest in operating an intake channel (Art. 6(1)(f)).
To protect the site from abuse and keep it available. Legal basis: our legitimate interest in security (Art. 6(1)(f)).

4. Who we share it with

We do not sell your data. We use a small number of processors strictly to operate the service:

Cloudflare. Content delivery, TLS and the anti-spam "Turnstile" check on our forms (used in production). Cloudflare processes connection data and challenge data to confirm requests are genuine.
AI language model provider. When you use the assistant, the messages in that conversation are sent to a third-party AI language model provider to generate a reply. This applies only to the on-site assistant; the custom AI systems ParallelCascade builds for clients can run inside the client's own environment, depending on what the client chooses.
Google (Gmail SMTP). Used to deliver the contents of your contact-form or assistant message to our inbox.

Some of these providers may process data outside the European Economic Area. Where that happens, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses. Self-hosted fonts mean the site itself loads no third-party web fonts and sends no data to font providers.

5. Cookies and analytics

We use the tool below to understand how the site is used. No cookies are set until you accept in the cookie banner:

Matomo. Self-hosted by us, and loaded only if you accept. The data stays on our own server and is not shared with anyone.

When you first visit, no cookies are set until you choose. You can accept or reject with equal ease, and change or withdraw your choice at any time using the button below. If you reject, no analytics cookies are set and Matomo does not load at all. Separately, in production the Cloudflare Turnstile anti-spam check may store a short-lived technical token strictly to verify that a form submission is human; this is essential to the form and is not used to track you across sites.

6. How long we keep it

We keep enquiry and assistant messages only as long as needed to handle your request and any resulting engagement, and then delete or archive them. Technical security counters are short-lived and reset on a daily cycle. If you ask us to delete your data, we will do so unless we are required to keep it by law.

7. Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where processing relies on consent, you may withdraw it at any time. To exercise any of these rights, contact us through the contact form.

You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or the authority in your country of residence.

8. Changes to this policy

We may update this policy as the service evolves. The date at the top shows when it was last changed; material changes will be reflected here.