Privacy Policy

1. Data Controller

This website is operated by Nelson Alexandre da Silva Lima, the data controller for personal data processed through this site. The project operates under the Domicilia brand.

For data protection enquiries and to exercise your rights, contact us at privacidade@domicilia.pt.

2. Data We Process and How

This website processes personal data only in the situations described below. We do not use analytics, behavioural tracking, personalised advertising, or share data with third parties for commercial purposes.

We do not carry out automated decision-making or profiling based on data processed through this site.

Data processed in the Domicilia app

In the application (employer and worker accounts), we additionally process:

• Account data: name, username, recovery email and phone (encrypted at rest) — legal basis: performance of contract.
• Worker data: tax number (NIF), social-security number (NISS), address and IBAN, encrypted at rest — legal basis: the employer's labor and social-security obligations.
• Labor records: contracts, day/time records, salary calculations, issued payslips and social-security payments — legal basis: legal obligation (Portuguese labor and tax retention).
• Messages and support: employer–worker conversations and support tickets (support content encrypted at rest) — legal basis: performance of contract.

Account deletion: you can delete your account directly in the app (Profile → Delete Account). Deletion becomes effective 30 days after the request (a grace period you can cancel by signing in again). After execution, account data, messages, notifications and tasks are deleted; labor and tax records (contracts, work records, issued payslips, social-security payments) are kept in anonymized form for the retention period required by Portuguese labor law — Art. 17(3)(b) GDPR.

3. Sub-processors and International Transfers

We use the following sub-processors to operate the website and manage the waitlist:

• Cloudflare, Inc. (USA) — hosting, CDN, and DDoS protection. Transfer covered by Standard Contractual Clauses (SCCs) issued by the European Commission.
• Web3Forms — receives and forwards waitlist form submissions to the controller's inbox. The submitted email is processed solely for this purpose. Transfer covered by SCCs.

When you click the WhatsApp channel link, you are redirected to a third-party platform (Meta Platforms, Inc.) and your data is then processed under that entity's privacy policy.

4. Your Rights Under the GDPR

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of your data (right to be forgotten)
• Portability: receive your data in a structured, transferable format
• Restriction: limit how your data is used
• Objection: object to processing based on legitimate interest
• Withdrawal of consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, email privacidade@domicilia.pt with a clear description of your request — this channel also works for data subjects without an account in the app. App users may alternatively use the built-in support ticket system (Profile → Support), the primary day-to-day support channel. We will respond within one month (extendable by a further two months in cases of particular complexity, with prior notification).

If you believe your rights have been infringed, you have the right to lodge a complaint with the competent supervisory authority (see section 5).

5. Supervisory Authority

Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal
Tel: +351 21 392 84 00
Email: geral@cnpd.pt
Website: www.cnpd.pt

6. Legal Compliance

This privacy policy was prepared in compliance with:

• Regulation (EU) 2016/679 — General Data Protection Regulation (GDPR)
• Law No. 58/2019 — Portuguese Data Protection Act
• Law No. 41/2004 — Processing of personal data in electronic communications