Privacy Policy

Last updated: April 22, 2026

This Privacy Policy describes how Approvals24, Lda. (“Approvals24,” “we,” “us,” or “our”) collects, uses, and protects personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Portuguese data protection law.

Who We Are

Approvals24, Lda. is the data controller responsible for your personal data. We are incorporated in Portugal and our registered address is available upon request. You can reach our data protection contact at privacy@approvals24.com.

Information We Collect

Information you provide. When you request a demo, contact us, or create an account, we collect personal data such as your name, work email address, company name, job title, and any message you choose to include.

Usage data. We automatically collect certain technical data when you visit our website, including your IP address, browser type, pages visited, and time spent on pages.

Legal Basis for Processing (GDPR Art. 6)

We process your personal data only where we have a lawful basis to do so:

  • Contract performance — to provide and administer the services you have requested (Art. 6(1)(b)).
  • Legitimate interests — to operate and improve our platform, prevent fraud, and send service-related communications (Art. 6(1)(f)).
  • Consent — for optional marketing communications. You may withdraw consent at any time (Art. 6(1)(a)).
  • Legal obligation — where we are required to process data to comply with applicable law (Art. 6(1)(c)).

How We Use Your Information

  • Provide, operate, and maintain our services
  • Respond to your inquiries and demo requests
  • Send transactional communications (e.g. receipts, onboarding)
  • Send promotional communications where you have given consent or where permitted under legitimate interests (you may opt out at any time)
  • Analyse usage to improve our website and services
  • Comply with legal and regulatory obligations

Sharing & International Transfers

We do not sell your personal data. We may share your data with trusted sub-processors (e.g. hosting, email delivery, analytics) who act on our documented instructions and are bound by data processing agreements. A list of current sub-processors is available on request.

Where we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or we rely on adequacy decisions issued by the European Commission.

Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by applicable law. Account data is retained for the duration of the contractual relationship and deleted within 90 days of account closure unless a longer retention period is legally required. You may request earlier deletion at any time.

We implement industry-standard technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights, which you may exercise free of charge by contacting us at privacy@approvals24.com:

  • Access — obtain a copy of the personal data we hold about you (Art. 15).
  • Rectification — have inaccurate or incomplete data corrected (Art. 16).
  • Erasure — request deletion of your data in certain circumstances (Art. 17).
  • Restriction — ask us to restrict processing in certain circumstances (Art. 18).
  • Portability — receive your data in a structured, machine-readable format (Art. 20).
  • Objection — object to processing based on legitimate interests or for direct marketing (Art. 21).
  • Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) at www.cnpd.pt, or with the supervisory authority of your EU member state of habitual residence.

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the date above and, where appropriate, by direct notification.

Cookies

We use cookies and similar technologies to ensure the website functions correctly and to understand how it is used. You can control cookie preferences through your browser settings. Cookies strictly necessary for the operation of our services do not require your consent; all other cookies are set only with your agreement.