Privacy Policy

Last updated: 2026-04-19 · GDPR compliant

This policy explains how Lucisnet collects, uses, and protects personal data processed through lucisnet.com, in compliance with Regulation (EU) 2016/679 (GDPR) and Portuguese Law 58/2019.

Data controller

• Entity: Lucisnet
• Jurisdiction: Portugal
• Email: info@lucisnet.com

What data we process

This website is a static page served from Cloudflare Pages. The personal data we process is:

• Contact form submissions — if you use the contact form, we process your name, email address, and message content for the purpose of replying. Submissions are handled by Formspree (our form-processing service) and delivered to us by email.
• Email content — if and when you send a message directly to info@lucisnet.com, we process your email address and the content of your message for the sole purpose of replying.
• Analytics data (with your consent) — if you accept the analytics banner, we use Google Analytics 4 to understand aggregated traffic patterns. This includes a pseudonymous client identifier, pages visited, visit duration, approximate geolocation (country/region level, derived from IP), and device/browser metadata. IP addresses are not stored in full by GA4.
• Server/CDN logs — Cloudflare, as our infrastructure provider, may process IP addresses and request metadata for security and service-availability purposes. See Cloudflare's privacy documentation for details.
• Font delivery — fonts are loaded from Google Fonts. Google may receive your IP address as part of that request.

Legal basis

• Contact form and email correspondence: legitimate interest in responding to your enquiry (Art. 6(1)(f) GDPR) and performance of a potential contract (Art. 6(1)(b)).
• Analytics: your explicit consent (Art. 6(1)(a) GDPR), given via the consent banner. You can withdraw it at any time — see the "Cookies" section below.
• Logs: legitimate interest in network and information security (Art. 6(1)(f)).

Retention

Contact form submissions are stored by Formspree for the duration of our subscription (typically indefinitely on active plans, with deletion available on request) and mirrored to our email inbox. Email correspondence is retained for as long as the relationship remains active, or as required to comply with legal obligations (typically up to 10 years for commercial records in Portugal). Analytics data is retained in Google Analytics for up to 14 months (our configured retention). Server logs are retained by our infrastructure provider per their standard retention policies.

Sharing & international transfers

We do not sell, rent, or disclose personal data to third parties, except:

• To our infrastructure, analytics and form-processing providers (Cloudflare, Google, Formspree, email provider) strictly for service delivery, under their respective Data Processing Agreements;
• When required by law, court order, or competent authority.

Some of these providers are established in the United States, which means personal data may be transferred outside the EU/EEA. Transfers are safeguarded by the EU–US Data Privacy Framework (where the provider is certified, including Google) and, where relevant, by Standard Contractual Clauses.

Your rights

Under the GDPR, you have the right to: access your data, rectify inaccurate data, request erasure, restrict processing, data portability, withdraw consent at any time, and object to processing. To exercise any of these rights, email info@lucisnet.com.

You may also lodge a complaint with the Portuguese data protection authority, CNPD (cnpd.pt).

Cookies

Cookies are only set after you explicitly accept the analytics banner. If you decline (or ignore it), no cookies are placed. The cookies we use are:

• _ga — Google Analytics. Pseudonymous client identifier. Expires in 2 years.
• _ga_708M3ZDCC1 — Google Analytics. Session state for the specific GA4 property. Expires in 2 years.

We set no other cookies: no advertising pixels, no cross-site trackers, no fingerprinting. Your consent choice itself is stored in your browser's localStorage under the key lucisnet_consent — this is not a cookie and is not sent to us.

Withdraw consent at any time: reset your cookie preference. This clears any GA cookies already set, disables the analytics script on the next page load, and re-shows the banner. You can also opt out directly in your browser settings, or use Google's GA opt-out add-on.

Changes

We may update this policy. The date at the top of the page reflects the last revision. Material changes will be noted clearly.