Legal
Privacy Policy
How SentryTechLab collects, uses and protects personal data, and what rights you have over it.
This document is being finalised. The sections below set out how we handle personal data. The text is under legal review, and our formal company registration details will be added once that registration is complete. If you have a question about your data in the meantime, contact us through the contact page and we will answer it directly.
1. Who is responsible for your data
The controller of the personal data described in this policy is Sentry Tech LAB, trading as SentryTechLab.
For any question about this policy or about how your data is handled, contact us at [email protected].
2. What data we collect
We collect only what we need in order to respond to you and to run this website.
Data you give us
When you complete the contact form: name, company, email address, country, the nature of your enquiry, your message, and optionally your telephone number and how you heard about us. When you email us directly, whatever the message contains.
Technical data
Your IP address, browser type and pages visited, recorded in standard server logs. This is a necessary by-product of serving a website. We also count visits and pages viewed with Cloudflare Web Analytics, in aggregate, without cookies and without identifying you.
Cookies
A cookie that remembers your language preference, so the site does not reset to another language as you navigate. See section 7.
3. Why we use it, and on what legal basis
Under the GDPR every use of personal data needs a lawful basis. Ours are as follows.
To answer your enquiry
Legal basis: your consent, given when you submit the form, and our legitimate interest in responding to a commercial approach you initiated.
To provide our services
Where we go on to work together, to perform the contract between us.
To keep the site secure and working
Our legitimate interest in operating the site, detecting abuse and diagnosing faults.
To meet legal obligations
Where accounting, tax or other law requires us to retain certain records.
We do not use your data for automated decision-making or profiling, and we do not sell it.
4. Who else sees it
We share personal data only with service providers that help us operate, and only to the extent they need it. Each acts as a processor under a written agreement.
- Our hosting provider, which stores this website and its data
- Our email provider, through which we receive and answer your messages
- Our network and security provider, Cloudflare, which protects the site, checks the contact form for automated abuse and produces aggregate visit statistics
- Our image delivery service, which serves the images on this site
- Professional advisers, where legally necessary
5. Transfers outside the European Economic Area
Some of the providers above may process data outside the EEA. Where that happens, the transfer is covered by an adequacy decision of the European Commission or by standard contractual clauses.
6. How long we keep it
Enquiries that do not proceed
Kept for 24 months so that we have context if you contact us again, then deleted.
Client records
Kept for the duration of our relationship and afterwards for as long as legal and accounting obligations require.
Server logs
Kept for 14 days and then overwritten.
7. Cookies
This site sets a cookie that stores your chosen language so that navigation stays consistent. It is strictly necessary for that function and holds no information that identifies you personally.
We do not use advertising cookies and we do not run third-party tracking on this site. Visit statistics come from Cloudflare Web Analytics, which sets no cookies and does not follow you across other sites. If that changes, this policy will be updated and consent will be requested before any non-essential cookie is set.
8. Your rights
Under the GDPR you have the following rights over your personal data. To exercise any of them, write to [email protected]. We will respond within one month.
Access
To be told whether we hold data about you, and to receive a copy of it.
Rectification
To have inaccurate or incomplete data corrected.
Erasure
To have your data deleted, where we have no overriding legal reason to keep it.
Restriction
To ask us to limit how we use your data while a concern is resolved.
Portability
To receive the data you gave us in a structured, machine-readable format.
Objection
To object to processing based on our legitimate interests.
Withdraw consent
To withdraw consent at any time, without affecting the lawfulness of processing carried out before you withdrew it.
If you believe we have handled your data improperly, you may complain to the supervisory authority. In Portugal this is the Comissão Nacional de Proteção de Dados (CNPD).
9. How we protect it
This site is served exclusively over an encrypted connection. Access to systems holding personal data is restricted to those who need it, and we apply security updates to the software we operate. No system is perfectly secure, and we do not claim otherwise; if a breach occurs that presents a risk to your rights, we will notify the supervisory authority and, where required, you.
10. Changes to this policy
We may update this policy as our services or legal obligations change. The version published on this page is always the one in force, and material changes will be signalled here.
Show us how your factory works.
Let us look at your processes, identify where value is being lost, and determine where technology can actually help.