Privacy Policy

Who we are

Runtime Revolution, Lda. is a software engineering company incorporated in Portugal, EU. Our registered address is Lisbon, Portugal. We operate the website runtime-revolution.com and provide engineering services to clients worldwide.

For the purposes of EU data protection law (GDPR), Runtime Revolution is the data controller for personal data collected through this website.

Contact for data protection matters: privacy@runtime-revolution.com

What data we collect and why

Contact form submissions

When you submit our contact form, we collect your name, email address, company name, and the message you write. We use this to respond to your enquiry and determine whether we can help. Legal basis: legitimate interest in responding to business enquiries.

Website analytics

We use analytics software to understand how visitors use our website — which pages are visited, how long people stay, and where traffic comes from. We do not use advertising pixels or cross-site tracking. Legal basis: legitimate interest in improving our website.

Email correspondence

If you email us directly, we store that correspondence in our email system to handle your enquiry and for our records. Legal basis: legitimate interest in managing business communications.

How we use your data

We use personal data only for the purpose it was collected:

• To respond to your enquiry
• To arrange and conduct discovery calls
• To send follow-up information you've requested (case studies, security overview)
• To improve our website and services

We do not sell personal data. We do not share personal data with third parties except as described in this policy.

Who we share data with

We use a small number of third-party services to operate our business:

• Netlify — website hosting and form handling (US, Privacy Shield)
• Google Workspace — email and calendar (EU data region)
• Calendly — meeting scheduling (US, Standard Contractual Clauses)

All processors are bound by data processing agreements. EU data residency is maintained where technically feasible.

How long we keep your data

Contact enquiries: 3 years from last contact, unless you ask us to delete sooner. Analytics data: aggregated, not personally identifiable, retained indefinitely. Email correspondence: 5 years for business records.

Your rights under GDPR

If you are located in the EU or UK, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to processing based on legitimate interest
• Request restriction of processing
• Data portability
• Lodge a complaint with your national data protection authority

To exercise any of these rights, contact us at privacy@runtime-revolution.com. We will respond within 30 days.

The supervisory authority for data protection in Portugal is the CNPD (Comissão Nacional de Proteção de Dados), cnpd.pt.

Cookies

This website uses essential cookies required for operation (session management, form security). We use analytics cookies to understand website usage. We do not use advertising or tracking cookies.

You can disable cookies in your browser settings. Essential cookies cannot be disabled without affecting site functionality.

Security

We use HTTPS throughout, access controls on all internal systems, and standard industry practices for data security. No method of transmission over the internet is 100% secure. If you believe your data has been compromised, contact us immediately at security@runtime-revolution.com.

Changes to this policy

We may update this policy when our practices change or when required by law. Material changes will be noted at the top of this page with a new "last updated" date. We will not use personal data collected before an update in ways materially different from those described at the time of collection.

Contact

For any questions about this privacy policy or how we handle your data:

Runtime Revolution, Lda.
Lisbon, Portugal
privacy@runtime-revolution.com