Privacy policy
This policy describes how we process your personal data under GDPR and Portuguese Law 58/2019.
Controller
Salvado Unipessoal Lda., reachable at ola@outramargem.pt.
Data collected
Identification (name, email, phone, NIF/NIPC), KYC documents (ID/passport, proof of address), activity data (CAE, description) and payment data (processed by Stripe — we don't store card details). For mail, we keep envelope photos and scans as contracted.
Purposes
Service delivery, compliance with legal obligations (KYC, accounting, tax), operational communication and, with your consent, product communications.
Retention
KYC: 7 years after contract end (AML obligation). Payment data: 10 years (accounting obligation). Mail images: 90 days after notification or collection.
Your rights
Access, rectification, erasure, restriction, portability, objection, and the right to complain to the CNPD. To exercise, write to ola@outramargem.pt.