We protect your data with care and transparency

Effective 1 January 2025. This policy explains how Shapinegcx collects, processes, and shares personal data when you interact with our platforms and services.

1. Data Controller

Shapinegcx, headquartered in Lisbon, Portugal, is the controller responsible for personal data processed under this policy.

2. Data We Collect

We collect information you provide directly (such as name, contact details, professional background) and data generated automatically (such as device information, usage analytics, and cookies).

3. Purpose of Processing

We use personal data to deliver learning services, manage accounts, communicate updates, improve content, ensure platform security, and meet legal obligations.

4. Legal Basis

Processing is based on consent, contractual necessity, legal compliance, or legitimate interest. We obtain explicit consent where required by law.

5. Data Sharing

We share data with trusted service providers who support our operations (such as learning platforms, analytics, and communications). These partners adhere to strict confidentiality obligations.

6. International Transfers

When transferring data outside the European Economic Area, we implement safeguards such as Standard Contractual Clauses or rely on adequacy decisions.

7. Data Retention

We retain data for as long as necessary to deliver services, comply with legal obligations, and resolve disputes. Retention timelines vary by data category.

8. Your Rights

You may request access, rectification, deletion, restriction, or portability of your data. You may also object to processing or withdraw consent at any time.

9. Security Measures

We employ administrative, technical, and physical safeguards to protect personal data, including encryption, access controls, and regular security assessments.

10. Cookies & Tracking

We use cookies for essential functionality and analytics. For more detail on cookie categories and controls, review our Cookie Policy.

11. Communications

You may opt into or out of marketing communications. Transactional messages necessary to deliver services will continue even if you opt out of promotional content.

12. Third-Party Services

Our resources may reference external services whose privacy practices differ. We encourage reviewing their policies before providing personal data.

13. Updates to this Policy

We may update this policy to reflect legal requirements or changes to our services. Updates will be posted here with revision dates.

14. Contact

To exercise your rights or ask questions, email [email protected]. You may also contact the Portuguese Data Protection Authority for unresolved concerns.