Privacy Policy

Last updated: 21 August 2026

This policy explains how AurelFront handles personal data when you visit aurelfront.com. Our product NIS2Shield, at nis2shield.aurelfront.com, is governed by its own privacy policy.

1. Who we are

This website is operated by AurelFront, currently run by an individual (sole trader) — João Filipe Oliveira Dias Leite, 4425-122 Maia, Portugal. We are the data controller for personal data processed through this site. You can reach us at joaofilipe.diasleite@aurelfront.com.

2. What we collect on this site

This is a static marketing website. We do not use tracking or advertising cookies, and fonts are self-hosted, so visiting these pages does not send your data to third-party font or analytics providers.

• Email you send us. If you email the address above, we process your message and contact details to reply and, where relevant, to take the conversation forward.
• Server logs. Our hosting provider (Netlify, Inc.) may process technical data such as your IP address and browser type to deliver the site securely and reliably.

3. Legal bases

We rely on our legitimate interest (Art. 6(1)(f) GDPR) in operating and securing the website and in responding to enquiries you send us. Where you contact us about a potential engagement, we also process data to take steps at your request prior to any contract (Art. 6(1)(b) GDPR).

4. Sharing and processors

We share personal data only with service providers that help us run the site and communicate with you — currently our hosting provider (Netlify, Inc.) and our email provider (Domínios.pt). They act on our instructions under appropriate data-processing terms. We do not sell personal data, and we do not use it to train AI models.

5. International transfers

Our hosting provider, Netlify, is based in the United States. Where personal data is processed outside the EU/EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

6. Retention

We keep enquiry emails only as long as needed to handle your request and for a reasonable period afterwards for our records, then delete them. Server logs are retained for a short period by our hosting provider.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to our processing of your personal data, and the right to data portability. To exercise any of these, email joaofilipe.diasleite@aurelfront.com. You also have the right to lodge a complaint with your local supervisory authority (in Portugal, the CNPD).

8. Changes

We may update this policy from time to time. The "last updated" date above reflects the current version.

Note for the site owner: the highlighted fields must be completed with AurelFront's real registration details, hosting/email providers and any applicable transfer safeguards before this is relied upon. This template is a starting point, not legal advice.