Privacy Policy

This policy explains what personal data Sursum collects through this website, why, and what you can do about it. We keep it short and plain on purpose.

Who we are

Sursum is a product studio based at R. Adriano C. de Oliveira 4A, 1600-312 Lisboa, Portugal. We are the controller of the personal data described here. You can reach us at legal@sursum.io.

What we collect

• When you send us a message on Let's talk: your name, your email, what you are building, the optional note, your budget range, what you want to do, how you heard about us, and whether you need an NDA.
• When you do the readiness check: your answers are kept in your own browser. They are sent to us only if you then contact us, together with your message, so we can see where you are.
• Technical data any website receives to answer a request, such as your IP address and browser type, kept in server logs for security.

Why we use it, and on what basis

We use it to answer you and to prepare a proposal, which is a step you ask us to take before a contract (Article 6(1)(b) GDPR), and for our legitimate interest in running and securing the website (Article 6(1)(f)). We do not use your data for automated decisions, and we do not sell it.

Who sees it

The people at Sursum who answer enquiries, and the providers that run the website for us: hosting, file storage and email delivery. They process the data only on our instructions. We share it with nobody else unless the law requires it.

How long we keep it

Enquiries that do not become a project are deleted after 24 months. If we work together, we keep what the contract and the law require.

Cookies and analytics

At the moment this website sets no analytics or advertising cookies. It uses your browser's local storage only to remember your readiness check answers on your own device. If we add analytics later, we will update this page and ask for your consent where the law requires it.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to limit or object to its use, or to receive it in a portable format. Write to legal@sursum.io and we will answer within one month. You can also complain to the Portuguese data protection authority, the CNPD (cnpd.pt).

Security

Data travels over an encrypted connection, access to it is limited to the people who need it, and we keep it only in the services named above.

Changes

If we change this policy, the date at the top of this page changes with it.