Privacy Policy

This Privacy Policy explains how EXISTÊNCIA ELEGANTE UNIPESSOAL LDA ("we", "us", operator of CutGo) processes personal data in connection with https://cutgo.eu. It is written to comply with Regulation (EU) 2016/679 (GDPR) and applicable Portuguese law.

1. Data controller

2. Categories of data we process

2.1 Data you provide

• Account data — email, password hash, display name, phone (optional), preferred interface language.
• Order data — cutting plans (dimensions and quantities of parts), selected material, comments to the contractor, order history.
• Contractor data — for registered cutting shops: company name, address, contact details, pricing, materials, equipment, photos, working hours.
• Communication — messages exchanged with us by email or submitted through forms.

2.2 Data we collect automatically

• Technical data — IP address, browser user agent, language, timestamps of requests. Stored in short-lived server logs for security and abuse prevention.
• Cookies and local storage — see our Cookie Policy. We currently use only strictly necessary cookies.

3. Purposes and legal bases

4. Recipients and processors

We share personal data with the following categories of recipients only to the extent necessary to operate the service:

• Cutting contractors on the platform — when you place an order, the contractor receives your name, contact details, cutting plan, and comments, so they can process the order.
• Supabase Inc. (database, authentication, storage) — hosting of account and order data in the EU.
• Vercel Inc. (web hosting, CDN, edge functions) — delivery of the website.
• Resend (Resend.com) — delivery of transactional emails (order confirmations, status updates).
• Canny Inc. — feedback board embedded on the public feedback page. Only data you voluntarily submit to Canny is transferred.
• Authorities and courts, where we are required by law.

Where a processor is located outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

5. Retention periods

• Account data — for the lifetime of your account. You can delete your account at any time by emailing support@cutgo.eu.
• Order data — kept as long as needed for service delivery and, afterwards, for statutory bookkeeping periods (up to 10 years under Portuguese tax law).
• Server logs — typically 30 days, then deleted or anonymised.

6. Your rights

Under GDPR you have the right to:

• access your personal data (Art. 15);
• rectification of inaccurate data (Art. 16);
• erasure of your data ("right to be forgotten", Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interests (Art. 21);
• withdraw consent at any time, where processing is based on consent (Art. 7(3)).

You can exercise these rights by emailing support@cutgo.eu.

7. Right to lodge a complaint

If you believe our processing of your data infringes the GDPR, you may lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados, CNPD): www.cnpd.pt — or with the supervisory authority in your EU country of residence.

8. Security

We use encryption in transit (HTTPS/TLS), password hashing, access controls, and regular security updates. Despite these measures, no transmission or storage system can be guaranteed to be 100% secure.

9. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you (GDPR Art. 22).

10. Children

The service is not directed to children under 16. If we become aware that we hold data of a child under 16 without parental consent, we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available at https://cutgo.eu/legal/privacy. Material changes will be announced on the website or by email.