Privacy Policy
Last updated: June 2026
Who we are
Seruya & Melo, Sociedade de Advogados, SP, RL ("we", "us", "the Firm") is the controller responsible for personal data collected through this website.
- Website: seruya-melo.com
- Contact: geral@seruya-advogados.com
- Based in: Sintra, Portugal
What data we collect and why
Contact form — we collect your name, e-mail and message, solely to respond to your enquiry. Legal basis: Article 6(1)(b) GDPR (pre-contractual steps) or, where no contract follows, 6(1)(f) (our legitimate interest in responding).
WhatsApp — if you contact us via the WhatsApp button, your message is processed by Meta under the WhatsApp terms.
Analytics — we use Vercel Web Analytics, a cookieless measurement tool that collects aggregated, anonymous statistics without identifying you or tracking you across sites. It collects no personal data and requires no consent.
Additional analytics (future) — we may use Google Analytics 4, in aggregated, pseudonymous form with IP anonymisation. If and when enabled, the legal basis will be your consent (6(1)(a)), given via the cookie banner.
Advertising — we use Google Ads for conversion measurement (and possibly remarketing), which sets cookies only after you consent. The legal basis is your consent (6(1)(a)), given via the cookie banner. By default no advertising tag collects data before consent (Consent Mode).
How long we keep your data
- Contact form messages — 2 years from last correspondence, or as required by professional rules
- Analytics data — 14 months
- Advertising conversion data — 90 days
Who we share your data with
We do not sell your personal data. We use the following processors:
- Vercel Inc. — website hosting (USA; certified under the EU–US Data Privacy Framework)
- MailerSend (MailerLite, UAB) — delivery of contact-form messages (Lithuania, European Union)
- Google LLC — advertising (conversion measurement) and analytics, if enabled (USA; certified under the Data Privacy Framework)
- Meta Platforms — when you choose to contact us via WhatsApp (USA; certified under the Data Privacy Framework)
International transfers
Where data is transferred to the USA, we rely on the EU–US Data Privacy Framework (Article 46 GDPR). MailerSend processes data within the European Union.
Security and automated decisions
We apply appropriate technical and organisational measures to protect your data. We do not carry out solely automated decision-making or profiling with legal effects on you.
Your rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erasure ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent, at any time
Complaints
To exercise your rights, contact geral@seruya-advogados.com; we respond within 30 days. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).
California residents (CCPA)
If you are a California resident, you have the right to know what information we collect, request its deletion, and opt out of the "sale" or "sharing" of your data. We do not sell or share personal data for behavioural advertising. Contact geral@seruya-advogados.com.
Cookies
We may use analytics and advertising cookies. On your first visit a banner lets you accept or decline non-essential cookies; you can change your preference at any time via "Cookie settings" in the footer. Strictly necessary cookies do not require consent.
Changes
We may update this policy. The date at the top reflects the most recent revision; material changes will be flagged on the website.
Contact
For any question about this policy or how we handle your data: Seruya & Melo, Sociedade de Advogados, SP, RL — geral@seruya-advogados.com.