Privacy and Cookie Policy

Last updated: 20 July 2026

This Privacy and Cookie Policy explains how Bootic, Lda. collects, uses, stores and protects the personal data of visitors to thebootic.com and describes the storage technologies used while browsing the website.

1. Data controller

The controller responsible for the processing of personal data is:

Bootic, Lda.
Portuguese company and tax number: 518 137 384
Registered office: Avenida da República, N.º 676, 3º, Sala 3
4430-190 Vila Nova de Gaia
Portugal
Email: info@thebootic.com
Telephone: +351 912 099 140

Questions concerning privacy, data protection or the exercise of data protection rights may be sent to info@thebootic.com.

2. Personal data collected

Bootic may collect the following categories of personal data:

Data provided directly by the user

When a user submits the contact form, the following data may be collected:

  • name;
  • email address;
  • telephone number;
  • company or organisation;
  • message and any other information voluntarily included in the request.

Technical and usage data

When the website is used, certain technical data may be processed, including:

  • IP address;
  • date and time of access;
  • pages visited;
  • device type;
  • operating system;
  • browser;
  • approximate source of the visit;
  • interactions with the website.

Data for analytics purposes should only be collected after the user has consented to analytics cookies.

3. Purposes and lawful bases

Personal data may be processed for the following purposes:

Responding to enquiries

Data submitted through the contact form is used to assess and respond to the user’s request, prepare proposals, schedule meetings or take steps requested before a possible contract is entered into.

The lawful basis is taking steps at the request of the data subject prior to entering into a contract or, where the enquiry is not pre-contractual, Bootic’s legitimate interest in responding to communications addressed to it.

Managing business relationships

Where a business or contractual relationship exists, data may be used to manage projects, provide services, communicate with clients and suppliers, issue commercial documents and fulfil agreed commitments.

The lawful bases are the performance of a contract, pre-contractual steps and compliance with legal obligations.

Marketing communications

Where the user has provided specific consent, Bootic may send information about its projects, experiences, services, events, content or news.

Consent is optional and may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

Refusing marketing consent does not prevent the user from submitting the contact form or receiving a response.

Website operation and security

Technical data may be processed to ensure the operation, stability and security of the website, prevent misuse, investigate incidents and protect Bootic’s systems.

The lawful basis is Bootic’s legitimate interest in protecting the website, its systems and its users.

Analytics

Subject to consent, Bootic may use Google Analytics to obtain statistical information about the use of the website, including pages visited, visit duration, traffic source and device type.

The lawful basis is the user’s consent.

Compliance with legal obligations

Personal data may also be processed where necessary to comply with legal, tax, accounting, regulatory or judicial obligations applicable to Bootic.

4. Mandatory data

Fields marked as mandatory in the contact form are required so that Bootic can receive and respond appropriately to the enquiry.

Failure to provide this information may prevent the form from being submitted or make it impossible to provide an adequate response.

Data requested for marketing communications is optional.

5. Sources of personal data

Personal data is normally collected:

  • directly from the user through the contact form, email, telephone or other communications;
  • automatically during browsing through cookies and similar technologies, where applicable;
  • in the context of business, contractual or professional relationships.

6. Recipients and service providers

Bootic may use service providers that process personal data on its behalf, including providers of:

  • website hosting and management, including Webflow;
  • email and communications services;
  • storage and productivity tools;
  • technology and support services;
  • analytics services, including Google Analytics;
  • accounting, legal and administrative services.

These service providers should only process personal data under Bootic’s instructions and for the purposes necessary to provide their services.

Personal data may also be disclosed to public authorities, courts or regulatory bodies where required by law or pursuant to a lawful request.

Bootic does not sell personal data.

7. International transfers

The use of certain technology providers, including Webflow and Google, may involve the processing or storage of personal data outside the European Economic Area.

Where international transfers occur, Bootic will seek to ensure that an appropriate legal transfer mechanism is used, including:

  • an adequacy decision issued by the European Commission;
  • Standard Contractual Clauses;
  • additional contractual, technical or organisational measures;
  • another mechanism permitted under the GDPR.

8. Retention periods

Personal data is only retained for as long as necessary for the purposes for which it was collected.

As a general rule:

  • contact enquiries may be retained for up to 24 months following the last relevant interaction;
  • data relating to proposals, clients, suppliers and contracts will be retained during the business relationship and for the applicable statutory periods;
  • marketing data will be retained until consent is withdrawn or the data is no longer required;
  • technical security data will be retained for the period necessary to prevent, assess and resolve incidents;
  • cookie consent records will be retained for the period defined in the relevant preference.

When personal data is no longer required, it will be deleted or anonymised unless it must be retained to comply with a legal obligation or establish, exercise or defend legal claims.

9. Data subject rights

Subject to the applicable legal requirements, data subjects may exercise the following rights:

  • access to their personal data;
  • correction of inaccurate or incomplete data;
  • erasure;
  • restriction of processing;
  • data portability;
  • objection to processing;
  • withdrawal of consent;
  • lodging a complaint with a supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Rights may be exercised by contacting info@thebootic.com. Bootic may request additional information to confirm the identity of the person making the request.

10. Complaints

Data subjects have the right to lodge a complaint with the Portuguese supervisory authority:

Comissão Nacional de Proteção de Dados — CNPD
Av. D. Carlos I, 134, 1st floor
1200-651 Lisbon
Portugal

Lodging a complaint does not prevent the data subject from contacting Bootic first to seek resolution of the matter.

11. Security

Bootic implements appropriate technical and organisational measures designed to protect personal data against:

  • unauthorised access;
  • loss;
  • misuse;
  • alteration;
  • disclosure;
  • accidental or unlawful destruction.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

12. Automated decision-making

Bootic does not use personal data collected through the website to make decisions based solely on automated processing that produce legal effects or similarly significantly affect the user.

13. Cookies and similar technologies

Cookies are small files stored on a user’s device when visiting a website.

The website may also use similar technologies, such as browser local storage. Although local storage is not technically a cookie, it can be used to save preferences on the device.

Strictly necessary and functional technologies

These technologies support functions requested by the user or are required to store the user’s preferences.

NameProviderPurposeDuration
cookiesConsentBooticStores the user’s choice concerning analytics cookies in browser local storage.Until expiry, a change of preference or deletion of browser data
modalClosed4BooticRemembers that the user closed a particular window or message so that it is not displayed again during the defined period.7 days

The cookiesConsent identifier is stored in browser local storage and is not technically a cookie.

Analytics cookies

Analytics cookies should only be installed after the user has provided consent.

NameProviderPurposeDefault duration
_gaGoogle AnalyticsDistinguishes users through an identifier and enables the production of statistics concerning website usage.Up to 2 years
_ga_VPV65HG9BYGoogle AnalyticsMaintains information relating to the session state associated with Bootic’s Google Analytics property.Up to 2 years

Google Analytics may collect information about pages visited, visit duration, traffic source, device, browser, operating system and approximate geographical location.

Bootic does not currently use advertising or behavioural personalisation cookies through the website unless this policy is updated to reflect the introduction of additional tools.

14. Managing cookie preferences

During the first visit, the user may:

  • accept analytics cookies;
  • reject non-essential cookies;
  • read this Privacy and Cookie Policy.

Rejecting analytics cookies should not prevent the use of the website’s main functions.

The user may change or withdraw their choice at any time through the “Manage cookies” option available in the website footer.

Withdrawal of consent will prevent the future use of analytics cookies. It may also cause existing analytics cookies to be deleted from the device.

Users may also delete or block cookies through their browser settings. Deleting browser storage may cause the website to ask for a new choice.

15. Marketing communications

Bootic should only send electronic marketing communications to personal contacts where consent or another applicable lawful basis exists.

All marketing communications should offer a free and simple way to unsubscribe.

Responses to enquiries, proposals, meeting arrangements and communications necessary to manage a business relationship are not treated as a general marketing subscription.

16. Third-party websites

The website may contain links to third-party websites or services.

Bootic does not control the privacy practices of those third parties. Users should read the relevant privacy policies before providing personal data to them.

17. Children

The website is not specifically directed at children, and Bootic does not intend to knowingly collect children’s personal data through the contact form.

18. Changes to this policy

Bootic may update this Privacy and Cookie Policy to reflect legal, technological or operational changes.

The updated version will be published on this page together with the date of the latest revision.

Where changes are material and processing relies on consent, the user may be asked to make a new choice.

Manage cookies
© 2026 Bootic. All rights reserved.