PRIVACY POLICY_

1Who is responsible and what this notice covers

Revkos is the trading name of Sony Junior Ferreira Kafuta, a self-employed operator in Portugal and the controller of the website personal data described here. Contact: sony@revkos.com; R. Hermano Neves 18, Piso 3, Escritório 7, V6034, 1600-477 Lisboa, Portugal; +351 920 333 352.

This notice covers visits to revkos.com, booking and managing a free introductory Google Meet call, and enquiries sent to us. The website is intended for business customers. Paid projects are governed by a separate agreement. Processing that we perform on a client’s behalf requires its own agreed instructions and, where applicable, a data-processing agreement; it is not automatically covered by this website notice.

2Information we collect

• Bookings: the name and email address you enter, your selected time zone and appointment time, booking status and timestamps, and an optional business-goal answer if you choose to provide it. We also generate booking and calendar identifiers, a Google Meet link, and security information used to manage your booking and avoid duplicate requests.
• Enquiries: your email address, name and any message or business details you send to sony@revkos.com. The contact page provides email and booking links; it does not submit a separate contact form.
• Website and security information: IP address and browser/request information processed to deliver and protect the site, booking-session identifiers, and browser/device signals processed by Cloudflare Turnstile. The booking application derives an abuse-limiting identifier from your IP address rather than storing the raw IP in the booking record. Hosting and security providers may separately process IP addresses and request logs.
• Optional analytics: with your consent, Google Analytics receives page-view and browser/device information and uses pseudonymous browser/session identifiers to measure visits. Google may derive approximate location from connection information. We do not request GPS or precise device location.
• Preferences: consent choices and a browser-level consent identifier managed by Termly, and your chosen motion setting stored in your browser.

Information comes from you, your browser, and the service providers operating these features. This website does not import purchased contact lists or enrich visitor records from social-media profiles. There are no visitor accounts or website payment-card fields. Please do not send passwords, payment-card numbers, health information or other sensitive personal data in enquiries.

The name, email and scheduling details are needed to create and send a meeting invitation. Without them we cannot complete an online booking. The business-goal answer and analytics consent are optional.

3How we use information and our legal bases

• Responding to enquiries and arranging calls: to understand your request, send invitations, show availability and manage changes. Where you personally request steps towards a contract, we rely on those pre-contractual steps. Where you act for a business, we rely on our legitimate interest in responding to business enquiries and managing business relationships.
• Running and protecting the website: to deliver pages, prevent forged or duplicate requests, limit abuse and check for bots. We rely on our legitimate interests in operating a reliable and secure website, balanced against your rights.
• Visit analytics: to understand page usage and improve the website, based on your optional analytics consent. You may withdraw it through Cookie settings.
• Remembering requested preferences: to respect your consent choices and motion setting, and to demonstrate or meet applicable consent obligations. We rely on applicable legal obligations and our legitimate interest in respecting your choices, as appropriate.
• Legal duties and disputes: to respond to lawful requests and privacy requests, and establish, exercise or defend legal claims, based on the relevant legal obligation or legitimate interest.

Booking a call does not subscribe you to a marketing list or provide consent for unrelated marketing. Our website does not use personal data for targeted advertising or build inferred consumer profiles. It does not make solely automated decisions about you with legal or similarly significant effects. Automated security checks may block a booking attempt; you can email us for assistance.

4Providers and other recipients

We use the following providers to operate the website and respond to your requests. They receive the information needed for their respective services:

• Vercel: website hosting, delivery and booking API execution, including associated request/security processing.
• Neon: database storage for booking records and temporary abuse-limiting state.
• Google Workspace, Calendar and Meet: business email, appointment creation, meeting invitations and video-meeting links. Booking names, email addresses and appointment details are sent to Google Calendar; an optional goal may be stored with the event. We check our own calendar’s busy times, not your private calendar. You do not connect your Google account to our booking system.
• Cloudflare Turnstile: browser-based bot detection and server-side verification of booking challenges.
• Termly: consent banner, browser preferences and consent records.
• Google Tag Manager and Google Analytics 4: loading the consent-managed tags and, only with analytics consent, measuring page visits.

Providers may use authorised subprocessors under their service arrangements. We may also disclose relevant information where required by law or necessary to protect legal rights. We do not sell website visitors’ personal information or disclose it for cross-context behavioural advertising.

Invitation emails and meeting links are delivered to the address you provide. Keep your private booking-management link confidential: someone with that link can access and manage the booking. If you follow a link to Google Meet or another external service, that service’s own privacy information also applies.

5Cookies, analytics and privacy signals

See our Cookie Policy for the current cookie and local-storage table, purposes and durations. Essential consent/security functions operate independently of optional analytics. Refusing analytics does not prevent booking or contacting us.

Analytics is disabled until you allow it. Our configuration excludes booking-form fields, private booking-management tokens, URL query strings, fragments and the referring-page URL from Analytics page reports. Google signals, advertising personalization and automatic enhanced-measurement tracking are disabled.

Use Cookie settings to change or withdraw consent. Withdrawal disables further Analytics collection and removes the Analytics cookies accessible to our site; it does not automatically erase data already received by Google. Our site also keeps Analytics disabled when your browser exposes an enabled Global Privacy Control (GPC) signal. Legacy Do Not Track is a different browser setting and is not the signal used by this control.

6International processing

We operate in Portugal, but the providers listed above use international infrastructure and support operations. Website and booking information can be processed outside Portugal and the European Economic Area, including in the United States. Our hosting is not limited to the EU. We do not represent that Revkos is certified under the EU-US Data Privacy Framework or operates approved binding corporate rules.

International transfers subject to EU or UK data-protection rules require an applicable legal basis for transfer, such as an adequacy decision or appropriate contractual safeguards. The relevant arrangements depend on the provider, service and destination. Contact sony@revkos.com for information about the safeguards applicable to your data and how to obtain a copy where available.

7How long information is kept

Retention depends on the purpose, whether an enquiry or appointment remains active, necessary follow-up, applicable legal duties and any ongoing dispute or security issue. We do not apply a single fixed retention period to every type of information.

• Booking records and enquiries: we retain information to administer the appointment or enquiry, relevant follow-up and any justified legal or security need. The current booking system does not automatically erase the database record when a meeting ends or is cancelled. Cancellation changes the appointment but is not a request to erase personal data. Email copies and provider backups are separate from the live booking record. You may request deletion using the contact details below.
• Abuse-limiting state: counters expire after ten minutes; expired entries are removed when a later valid booking API action runs, rather than by a continuously running deletion timer.
• Browser cookies and preferences: the booking security cookie lasts twelve hours. Other cookie and local-storage durations are listed in the Cookie Policy. Cookie expiry is not the same as deletion of server-side data.
• Provider records: hosting logs, consent records, analytics reports, email and backups are subject to the relevant service settings and retention arrangements. We do not promise that clearing your browser or cancelling a meeting immediately removes these copies.

When handling a deletion request, we assess what is still needed and any applicable legal exceptions. If information must be retained, we will explain the relevant reason as required by law.

8Protecting your information

We use HTTPS, server-side access to provider credentials, signed booking-management links, booking-session checks, request limits and server-validated Turnstile checks. These measures help protect the information handled by the website; no online service can guarantee absolute security. Do not share your private booking-management link or send confidential credentials through ordinary enquiry emails.

9Your rights and requests

Depending on the law that applies, you may have rights to access or obtain a copy of your personal data, correct inaccurate information, request erasure, restrict processing, receive portable data, or object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. These rights have conditions and exceptions.

Send a request to sony@revkos.com or write to the postal address below. You do not need to create an account. Describe the request and, for booking information, use the email address associated with the booking where possible. We may ask for proportionate information to verify identity before releasing or changing personal data.

We will respond within the applicable legal deadline. Under the GDPR this is generally one month, with extensions permitted in specified circumstances and notice of the extension. Where we cannot comply, we will explain the reason and relevant complaint options.

You may complain to the Portuguese supervisory authority, Comissão Nacional de Proteção de Dados (CNPD), or another competent data-protection authority. UK residents can contact the Information Commissioner’s Office. You do not have to contact us before exercising your right to complain.

10Additional information for US visitors

The categories handled through this website are identifiers such as names, email addresses, IP addresses and browser identifiers; appointment and business-enquiry information you provide; and internet/device activity for security and consented analytics. Sources, purposes, recipients and retention criteria are described above. We do not use this website to collect government identification numbers, payment-card details, precise GPS location, biometric identifiers or inferred consumer profiles.

If a US state privacy law applies to our processing of your information, you may have rights to know/access, correct, delete or obtain a copy of data, to opt out of covered sales, sharing or targeted advertising, and to appeal certain decisions. We do not sell or share website personal data for cross-context behavioural advertising. Our GPC behavior is described above.

Use the email or postal contact below to submit a request. Where authorised-agent requests are permitted, we may require proof of authority and identity. If you wish to appeal a response, email sony@revkos.com with “Privacy appeal” and the relevant request details. We will not unlawfully discriminate against you for exercising applicable privacy rights.

11Children and sensitive information

This business website is not directed at children, and our booking form does not ask for age, government identifiers or special-category data. If you believe a child has supplied personal information, or you have sent sensitive information by mistake, contact us so we can assess and address it. Please limit enquiry messages to what is necessary to discuss your business request.

12Contact and changes to this notice

Privacy contact: sony@revkos.com. Controller: Sony Junior Ferreira Kafuta, trading as Revkos. Postal address: R. Hermano Neves 18, Piso 3, Escritório 7, V6034, 1600-477 Lisboa, Portugal. Phone: +351 920 333 352. You can also visit our contact page.

We will update this notice when our website processing changes. The date at the top identifies the latest revision. We will provide additional notice or request consent where applicable law requires it.