Privacy Policy

Last updated: October 2026

1. Introduction

This Privacy Policy describes how M. Castelao, operating as a self-employed professional, located in Portugal (the "Data Controller", "we", "us"), collects, uses and protects your personal data when you use the website www.sh0gun.io (the "Website"). We are committed to complying with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Portuguese Data Protection Act (Law No. 58/2019 of 8 August).

2. Data We Collect

We only collect personal data that you voluntarily provide through the contact form on the Website. Specifically, when you submit the contact form, we collect:
  • First name and last name
  • Professional email address
  • Company name
  • Job position
  • The content of your message
We do not collect any other personal data. The Website does not use analytics or advertising trackers, and no account creation is available.
Technical data

When you browse the Website, our hosting provider automatically collects and stores technical logs (such as your IP address, browser type, and pages visited) for security purposes and to ensure the proper functioning of the Website. These logs are retained in accordance with the hosting provider's policy and applicable legal obligations.

3. Purposes and Legal Basis of Processing

Purpose

The collection of the data listed above is solely for the purpose of contacting you again. They are in no way shared with any third party.
Legal basis (GDPR)

Responding to your contact request and communicating with you by email
  • Legitimate interest (Art. 6(1)(f)) — we have a genuine and proportionate interest in responding to enquiries about our professional services Keeping a record of exchanges for follow-up on requests
  • Legitimate interest (Art. 6(1)(f)) Protecting the Website against spam and abuse (anti-bot mechanism and rate limiting)
  • Legitimate interest (Art. 6(1)(f)) — ensuring the security and integrity of our services
We do not use your data for automated decision-making, profiling, or marketing purposes. We do not sell or rent your personal data to any third party.

4. Recipients of the Data

Your personal data is processed only by us and, where strictly necessary for the purposes described above, by the following service providers acting as data processors: Hostinger International Ltd. — hosting of the Website and its database, and email (SMTP) delivery services for contact requests. The server hosting this Website is located in Paris, France. No other third party has access to your personal data.

5. Data Transfers Outside the European Union

As the hosting and email servers used for this Website are located in France, your personal data is not transferred outside the European Union. Should this situation change, this Privacy Policy will be updated and appropriate safeguards (such as EU Standard Contractual Clauses) will be put in place before any transfer.

6. Data Retention

Your personal data collected via the contact form is retained for a maximum period of 12 months from our last exchange, after which it is deleted. Technical server logs are retained for a shorter period in accordance with our hosting provider's standard practices.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:
  • Right of access — obtain confirmation that your data is processed and receive a copy of it;
  • Right to rectification — request the correction of inaccurate or incomplete data;
  • Right to erasure — request the deletion of your data;
  • Right to restriction of processing — request that processing be limited;
  • Right to object — object to the processing of your data;
  • Right to data portability — receive your data in a structured, commonly used format.
To exercise any of these rights, please contact us at contact@sh0gun.io. We will respond within one month of receiving your request. You also have the right to lodge a complaint with the French Data Protection Authority (CNIL — Commission Nationale de l'Informatique et des Libertés, www.cnil.fr), or with the data protection authority of your place of residence if you live in another EU member state.

8. Security Measures

We implement appropriate technical and organisational measures to protect your personal data, including:
  • Encryption of data in transit (HTTPS / TLS);
  • Protection of the contact form against CSRF attacks;
  • Server-side validation of all submitted data;
  • Restriction of access to the database to authorised persons only;
  • Rate limiting on the contact form to prevent abuse.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last updated" date.

10. Contact

For any question regarding this Privacy Policy or the processing of your personal data: M. Castelao Email: contact@sh0gun.io