Privacy notice

Cosmopolitan Squirrel · Unipessoal Lda is a Portuguese private limited company headquartered in Porto.

We are the data controller responsible for personal data submitted through this site. For any data-related question, write to hello@csquirrel.com.

We only collect personal data when you choose to send it to us via the contact form. That data is: your name, your company name (optional), your email address, your project brief (whatever you choose to write), and the site language you used.

We do not use tracking cookies, marketing pixels, or third-party analytics. Your light/dark theme preference is saved in your browser's local storage and never leaves your device.

Like any web server, our hosting provider keeps short-lived technical logs (such as IP address, user agent, and request paths) for security and debugging.

To reply to your enquiry and discuss whether we can help. If we move into a project together, to contact you about that project. To meet legal obligations (for example, accounting records, where applicable).

We never sell your data, never share it for marketing, and never use it to train AI models.

Under GDPR Article 6 we rely on:

Pre-contractual steps at your request (Art. 6(1)(b)) — when you ask us about a project.

Our legitimate interest in business correspondence (Art. 6(1)(f)) — for general replies and follow-ups.

Legal obligation (Art. 6(1)(c)) — when retention is required by Portuguese tax or accounting law.

Enquiries that don't lead to a project: up to 24 months, then deleted.

Active client correspondence: for the duration of the engagement plus the period required by Portuguese law (typically up to 10 years for tax and accounting records).

You can ask us to delete your data sooner — see your rights below.

We use a small number of service providers (sub-processors) to run the site:

Resend (resend.com) — receives your name, email, company, and brief in order to deliver your message to our inbox.

Our hosting provider — runs the site infrastructure and may briefly process technical logs.

We do not share your data with anyone else.

Some of our service providers may process data outside the European Economic Area. Where they do, we rely on the appropriate safeguards required by GDPR — typically Standard Contractual Clauses.

Under GDPR you have the right to access your data, correct it, request deletion, restrict or object to processing, receive your data in a portable format, and withdraw consent (where consent is the basis).

You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD) — cnpd.pt.

To exercise any of these rights, email us at hello@csquirrel.com.

We may update this notice from time to time. The "last updated" date at the top will reflect any change. For material changes that affect existing data, we'll get in touch directly where we can.