Privacy Policy
Last updated: 4 November 2026
This privacy policy explains how Concrete Tiger collects and uses your personal data when you visit concretetiger.com or get in touch with us, and what rights you have under the EU General Data Protection Regulation (GDPR).
Who we are
The controller responsible for your personal data is Rommel Gracias, a self-employed professional (trabalhador independente) trading as Concrete Tiger, Rua Professor Egas Moniz 1, 2780-101 Oeiras, Lisbon, Portugal.
Email: info@concretetiger.com
Phone: +351 929 410 421
What we collect and why
When you contact us. If you email or call us, we receive your name, contact details and whatever you choose to tell us. We use this only to reply and, if we work together, to deliver our services. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR).
When you book a call. Our “Book a call” button uses Calendly. Calendly collects your name, email address, your chosen time slot and any answers you give, and shares them with us so we can hold the call. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). See Calendly’s privacy notice.
Website statistics. With your consent, we use Google Analytics (provided by Google Ireland Limited) to understand how visitors use the website, such as which pages are viewed and roughly where visits come from. Analytics only runs if you accept statistics cookies in our cookie banner, and you can withdraw consent at any time. Legal basis: consent (Art. 6(1)(a) GDPR). See Google’s privacy policy.
Fonts. To display our typefaces, the website loads fonts from Adobe Fonts and Google Fonts. Your browser connects to their servers, which receive your IP address and basic browser information. Legal basis: our legitimate interest in presenting the website consistently (Art. 6(1)(f) GDPR).
Hosting and security. Our website is hosted by GoDaddy. Like any web server, it records technical data such as your IP address, browser type and the pages you request, to keep the site running and secure. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
Cookies. We only use non-essential cookies with your consent. Full details are in our Cookie Policy, where you can also change your choices.
Social media. Our website links to our Instagram, Facebook and LinkedIn pages. These are simple links: nothing is shared with those platforms until you click through, after which their own privacy policies apply.
Who we share it with
We never sell your personal data. We only share it with service providers that help us run the website and our business, as described above: GoDaddy (hosting), Google (analytics and fonts), Adobe (fonts) and Calendly (call booking). Where required, they act on our instructions under data processing agreements. We may also disclose data if the law requires us to.
Transfers outside the EU
Some of these providers are based in, or use servers in, the United States. These transfers are protected by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission’s Standard Contractual Clauses.
How long we keep it
We keep enquiries and correspondence for as long as needed to deal with them and for up to two years afterwards, unless we start working together. Client records are kept for as long as the law requires, for example for tax and accounting purposes. Analytics data is kept for a maximum of 14 months.
Your rights
Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw your consent at any time (this does not affect anything we did before you withdrew it).
To use any of these rights, email us at info@concretetiger.com. We will reply within one month.
You also have the right to complain to a data protection authority. In Portugal this is the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.
Keeping your data safe
We use appropriate technical and organisational measures to protect your personal data, including an encrypted (HTTPS) connection to this website.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.