VEYAL / PRIVACY
Privacy Policy
Last updated 22 October 2026
We respect your privacy and aim to explain clearly how we handle personal data when you visit veyal.eu, use our assessments or contact us. This policy reflects the EU General Data Protection Regulation (Regulation (EU) 2016/679), Portuguese Law No. 58/2019 and, where applicable, Portuguese Law No. 41/2004 on electronic communications privacy.
1. Who we are
Veyal is a trading name of ASSERTIVEFOX – Unipessoal Lda, a company registered in Portugal. NIPC 519517644. Registered office: Parque Empresarial do Algarve, Lt 8, 21, 8400-431 Lagoa, Portugal. We are the controller of personal data collected through this website when we decide why and how it is processed. For privacy enquiries, contact hello@veyal.eu and mark your message “Privacy”. When delivering services for a client, Veyal may instead act as its processor under a separate agreement.
2. What information we collect
We may receive your name, business email address, telephone number, organisation, role, correspondence and information you choose to provide through our contact form or booking enquiries. Our business assessments may collect information about processes, staffing estimates, operating costs, systems and customer communications. When you request follow-up, we may associate assessment results with your contact details. Technical records can include IP address, browser details, referral information and security logs. Optional analytics identifiers are used only where you consent.
3. Why we use it and our lawful bases
We respond to enquiries, provide assessments and manage professional relationships on the basis of our legitimate interests in operating our consultancy, or pre-contractual steps where applicable. We process service and billing records to perform contracts and meet legal obligations. We use technical data to maintain security on the basis of legitimate interests. Non-essential analytics and tracking technologies require consent where applicable. Electronic direct marketing is undertaken only where permitted by applicable marketing and electronic communications rules, including consent where required. You may object to legitimate-interests processing and direct marketing.
4. Website assessments
The Automation Opportunity Calculator and Customer Communications Maturity Assessment provide indicative, rules-based results based on your answers. They are not independent audits, compliance certifications or guaranteed savings forecasts. Headline results are available without providing contact details. If you request a follow-up, we may send your contact information and relevant results to our CRM. Please do not enter passwords, sensitive personal information or confidential records about identifiable customers into assessment fields. The assessments do not make decisions with legal or similarly significant effects about individuals.
5. Cookies, HubSpot and consent
We use essential local storage to remember your cookie choice. Subject to your consent, we may load HubSpot website tracking for visitor analytics and CRM-related website engagement. HubSpot forms are loaded only when you actively choose to open the contact form; the provider may then process technical information needed to supply that form. You can reject optional tracking without losing access to the website or assessment results. Use “Cookie settings” in the footer to change or withdraw your choice. See our Cookie Policy for details.
6. Who receives personal data
Service providers may include Vercel (hosting), HubSpot (forms, CRM and meeting services), Microsoft (business communications), and professional advisers where necessary. Providers act under their own terms and, where acting as processors, appropriate contractual arrangements. We do not sell personal data. We may disclose information where legally required or to protect legal rights.
7. Transfers outside the EEA
Some suppliers or their sub-processors may process or access data outside the European Economic Area. Where GDPR Chapter V applies, we rely on an appropriate transfer mechanism, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, with supplementary measures where necessary. Contact us for information on applicable safeguards.
8. Retention
We keep personal data only for as long as necessary for the stated purpose, including responding to enquiries, requested follow-up, security, contractual records and statutory accounting obligations. CRM records are reviewed and deleted or anonymised when no longer required. Applicable periods depend on the type of record and legal requirements. Consent preferences are retained on your device until you change them, clear site storage or the preference expires. You can ask us about retention of your particular information.
9. Security and breaches
We use risk-appropriate technical and organisational safeguards, including access controls, authentication, secure communications, restricted access to service providers and incident handling. No internet service is entirely risk-free. We assess personal data breaches and notify the Portuguese supervisory authority and affected people where required by Articles 33 and 34 GDPR.
10. Your rights
Subject to applicable conditions, you may request access, rectification, erasure, restriction, portability, or object to certain processing. You may withdraw consent at any time without affecting prior lawful processing. You can object to direct marketing at any time. Send requests to hello@veyal.eu marked “Privacy”. We normally respond within one month, with extensions where permitted by law. You may complain to the Comissão Nacional de Proteção de Dados (CNPD), Portugal’s supervisory authority.
11. Business contact sources and children
We may receive professional contact information from business introductions, professional networks and publicly available business sources, subject to applicable GDPR transparency duties. Our services are directed to professional audiences and not to children.
12. External services and changes
Links to third-party sites, including meeting-booking services, are governed by their own privacy notices. We may update this policy when our processing or legal obligations change; the revision date appears above.
This notice describes website processing; client delivery projects may be subject to additional contractual privacy documentation.