LABS

Draft. This page is not published. The data controller has not been decided (controller TBD).

Privacy

This text is a draft for review. It is not legal advice and it is not in force. Do not treat this page as a published policy until the controller has been decided.

Who handles the data

The data controller has not been decided (controller TBD). Until that decision, this page is not published.

Contact: hello@farollabs.com.

What this site asks for

Farol Labs is a marketing consultancy in Lisbon. For now, the public work is marketing on Meta and Google. This site introduces that, and a contact form.

The form asks for name, email, company and an optional message, plus confirmation that you have read this draft.

What this version does not do yet

In this version, the form is checked in the browser and is not sent to a server, a database or an email service. Farol Labs does not store it.

When the Raio-X exists on this site, it reads Meta and Google Ads read-only, for about 90 days, and returns the problem on one page. It does not read audience lists, leads, messages or posts. You can disconnect and ask for deletion.

This version of the site does not make that connection. There is no OAuth, no connect button, and we do not read Google or Meta data from here.

Intended purpose

When sending is connected, the intention is to use the form details only to reply to the request, before any contract (GDPR article 6(1)(b)).

The intended retention is up to 120 days after sending. That rule applies only once sending exists and the controller confirms it.

Intended processors

No processors are connected to this site yet. The following list is an intention, not a fact: hosting (Vercel), database (Supabase), email (Resend), protection against automated submissions (Cloudflare), and an AI provider still to be chosen.

Each one joins only with a processing agreement and with the agreement of whoever the controller is. Regions and transfers are still to be filled in on that agreement.

Transfers

Some intended providers are United States companies. If data leaves the European Union, the basis will have to be confirmed in each provider's agreement. None of this is settled.

Your rights

Access, correction, deletion, restriction, portability, objection and withdrawal of consent. You can write to hello@farollabs.com.

An account with buttons to disconnect or delete data does not exist on this site yet.

Complaints

Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.

Cookies

The site may store a strictly necessary cookie to remember the language (Portuguese or English). There are no analytics or advertising cookies.

Google user data

This site does not read Google API data. When the Raio-X reads Google Ads, it will be read-only, about 90 days of ad performance, and it will have to follow the Google API Services User Data Policy, including the Limited Use rules. The exact wording is for review before that connection exists.

Draft date

31 October 2026. This is not a publish date.