Data Privacy Policy

Last updated: 15 January 2026

Data Controller Information

This privacy policy applies to the processing of personal data by truegridprois S.A., a company registered in Portugal with registration number 741258963 and VAT number PT743698524, located at Avenida da República 57, 4056-408 Porto, Portugal.

Data Collection

We collect personal data that you provide to us directly when you use our services, contact us, or visit our website. The data we collect may include your name, email address, phone number, company information, and any other information you choose to provide when contacting us or using our spa financial management services. We collect this information through contact forms, email communications, phone calls, and during the provision of our professional services.

How We Use Your Information

We use your data to provide our spa financial management services, respond to your enquiries, communicate with you about our services, and improve our offerings. How we use your information depends on the services you use and your relationship with truegridprois. We process your personal data to fulfil our contractual obligations, comply with legal requirements, pursue our legitimate business interests, and with your consent where required by law.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please refer to our cookie policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds: performance of a contract when providing our services, compliance with legal obligations, protection of vital interests, performance of tasks in the public interest, and legitimate interests for business operations and marketing activities. Where required, we will obtain your explicit consent before processing your personal data.

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal data to third parties without your consent, except as described in this policy. We may share your information with trusted service providers who assist us in operating our business, conducting our services, or serving you, provided they agree to maintain confidentiality. We may also disclose your information when we believe disclosure is necessary to comply with legal requirements, enforce our policies, or protect our rights and safety.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period depends on the type of data and the purpose for which it was collected. Generally, we retain client data for seven years after the end of our business relationship to comply with legal obligations, whilst marketing data is retained until you withdraw consent or object to processing.

Your Rights

Under GDPR, you have several rights regarding your personal data, including the right to access, rectify, erase, restrict processing, data portability, and object to processing. You also have the right to withdraw consent where processing is based on consent. To exercise these rights, please contact us using the information provided below. We will respond to your request within one month of receipt.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located. When we transfer your data outside the EEA, we ensure appropriate safeguards are in place to protect your personal data in accordance with GDPR requirements, including adequacy decisions, standard contractual clauses, or other approved mechanisms.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Children's Privacy

Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information promptly.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Information

If you have any questions about this privacy policy or our data practices, or if you wish to exercise your rights regarding your personal data, please contact us at privacy@truegridprois.world or by phone at +351 223 757 221. You can also write to us at our registered address: Avenida da República 57, 4056-408 Porto, Portugal. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.