Privacy policy.

The controllers of personal data processed through this website are Corvana Holdings Ltd (England and Wales) and Corvana Participações, Lda (Portugal), together “Corvana”. Contact details are set out in the Legal notice and below.

We collect only what you send us through the contact form: your name, organisation, email address, phone number (optional), the nature of your enquiry and your message. We also record the date and time of submission, your browser’s user agent and a one-way hashed form of your IP address, used solely to prevent abuse.

We use your details only to read, assess and, where appropriate, respond to your enquiry, and to protect the form from misuse.

We rely on your consent, given when you submit the form (Article 6(1)(a) GDPR / UK GDPR), and on our legitimate interest in responding to correspondence and keeping our website secure (Article 6(1)(f)). You may withdraw consent at any time.

Contact submissions are retained for 24 months from receipt and then deleted, unless a continuing relationship or legal obligation requires us to keep them longer.

We use trusted service providers for website hosting and database storage. They process data only on our instructions and under contractual data-protection terms. We do not sell personal data or share it for marketing.

Our providers may process data outside the European Economic Area or the United Kingdom. Where this happens, transfers are protected by an adequacy decision, Standard Contractual Clauses or the UK International Data Transfer Addendum, as applicable.

You have the right to access, rectify or erase your personal data, to restrict or object to its processing, and to data portability. You also have the right to lodge a complaint with a supervisory authority: the Comissão Nacional de Proteção de Dados (CNPD) in Portugal, or the Information Commissioner’s Office (ICO) in the United Kingdom.

To exercise your rights or ask a question about this policy, write to us at the email address below.