Privacy policy.

1. Who is responsible

DungenLabs is the trade name of Hubert José Pires Van Den Dungen, a sole trader registered in Portugal (NIF 269031049) operating in Lisbon, who is the controller of the personal data described here. Full identification is in the legal notice. For any privacy question or request, write to info@dungenlabs.com.

2. What we collect and why

Project brief form

When you send a brief through the Start a Project form we receive your name, email address, project type, timeline, the brief you write and whether you asked for an NDA workflow. We use it only to reply, assess feasibility and prepare a proposal. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).

Email

If you write to us directly, we receive your email address and whatever you choose to include. We use it to answer you. Legal basis: steps before a contract, or our legitimate interest in answering enquiries (Article 6(1)(b) and (f) GDPR).

Technical data

To deliver and protect the website, our hosting provider processes technical data such as your IP address, browser type and the pages requested. Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR).

3. Cookies and tracking

This website sets no cookies and uses no analytics, advertising or tracking tools. Fonts and images are served from our own domain, so visiting a page sends nothing to third parties such as Google. The only thing stored in your browser is a note that you closed the cookie notice; it stays on your device and is never sent to us.

4. Who processes the data

The website and form submissions are hosted by Netlify, Inc., acting as our processor. Netlify is based in the United States; transfers are covered by Netlify’s Data Processing Agreement, which incorporates the European Commission’s Standard Contractual Clauses. Netlify may use sub-processors, for example to filter spam from form submissions. Emails are handled by our email service provider under the same kind of agreement. We do not sell or rent personal data.

Links to LinkedIn, Instagram and TikTok open those services, which apply their own privacy policies.

5. How long we keep it

We keep briefs and emails for as long as needed to answer your request and follow up any resulting project. If no project follows, we delete them within 12 months of our last contact. When a project goes ahead, related records are kept for the periods required by Portuguese accounting and tax law.

6. Your rights

You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Send your request to info@dungenlabs.com; we reply within one month. You can also lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (cnpd.pt).

7. Security

The site is served only over HTTPS, and access to submitted briefs is limited to the people who handle your request. For sensitive projects, ask for the NDA workflow before sharing detailed files.

8. Changes

If this policy changes, the new version is published on this page with a new date.