Privacy Policy

Last updated: 11 June 2026

This Privacy Policy explains how Split Second Systems ("we", "us", or "our") collects, uses, discloses, and protects personal data when you visit our website or contact us. We are established in Portugal and serve clients worldwide. This policy is designed to comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), UK GDPR, Portuguese Law No. 58/2019, the California Consumer Privacy Act (CCPA/CPRA), Brazil's LGPD, Canada's PIPEDA, and other international privacy frameworks.

1. Personal Data We Collect

We collect only the personal data necessary to operate our website and respond to enquiries. Depending on how you interact with us, this may include:

• Contact data: your email address and any information you include when you contact us (e.g. via the "Let's talk" button, which opens your email client).
• Technical data: IP address, browser type, device type, operating system, referring URL, pages visited, and approximate location derived from IP.
• Usage data: interactions with our website, such as scroll behaviour, clicks, and session duration, where collected through cookies or similar technologies.
• Communications: the content of messages you send us and related metadata.
• Language preference: your selected site language (English or Portuguese), stored locally in your browser so we can show the correct translation on return visits.

We do not knowingly collect sensitive personal data (such as health, biometric, or financial data) through this website, nor do we knowingly collect data from children.

2. How We Collect Data

• Directly from you when you email us or otherwise initiate contact.
• Automatically through cookies, server logs, and similar technologies when you browse our site. Approximate country may be detected via IP solely to select a default language (Portugal → Portuguese; otherwise English) until you choose manually.
• From third parties such as hosting providers, content delivery networks (CDNs), and font services that support website delivery.

3. Legal Bases for Processing (GDPR / UK GDPR)

Where GDPR or UK GDPR applies, we process personal data on the following legal bases:

• Consent (Art. 6(1)(a)): where you have given clear consent, such as for non-essential cookies.
• Contract (Art. 6(1)(b)): where processing is necessary to respond to your enquiry or take steps before entering a contract.
• Legitimate interests (Art. 6(1)(f)): to operate, secure, and improve our website, prevent fraud, and communicate with prospective clients, balanced against your rights.
• Legal obligation (Art. 6(1)(c)): where required by applicable law.

4. How We Use Your Data

We use personal data to:

• Respond to enquiries and communicate with you about our services.
• Operate, maintain, and improve our website and user experience.
• Ensure security, detect abuse, and prevent fraud.
• Comply with legal and regulatory obligations.
• Establish, exercise, or defend legal claims where necessary.

We do not sell your personal data. We do not share personal data for cross-context behavioural advertising.

5. Cookies & Similar Technologies

Our website may use cookies and similar technologies. These include:

• Strictly necessary cookies: required for basic site functionality.
• Functional cookies / local storage: to remember preferences (including language) and improve experience.
• Third-party resources: we load fonts and scripts from external providers (e.g. Google Fonts, CDN-hosted libraries). These providers may collect technical data in accordance with their own privacy policies.

Where required by law (including in the EU/EEA, UK, and Brazil), we will obtain your consent before placing non-essential cookies. You can manage cookies through your browser settings. Disabling cookies may affect site functionality.

6. International Data Transfers

As a Portugal-based company serving clients globally, your data may be processed in Portugal, the European Union, and other countries where our service providers operate. Where personal data is transferred outside the EU/EEA or UK to countries without an adequacy decision, we implement appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission or UK authorities.
• Supplementary measures where required to ensure an essentially equivalent level of protection.
• Your explicit consent, where applicable and appropriate.

You may request further information about transfer safeguards by contacting us.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, unless a longer period is required by law. Typical retention periods:

• Enquiry communications: up to 3 years from last contact, unless a business relationship continues.
• Server and security logs: typically up to 12 months.
• Cookie data: as specified at the time of consent or per cookie duration.

When data is no longer needed, we securely delete or anonymise it.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

EU / EEA / UK (GDPR)

• Right of access and to receive a copy of your data.
• Right to rectification of inaccurate data.
• Right to erasure ("right to be forgotten") in certain circumstances.
• Right to restrict processing.
• Right to data portability.
• Right to object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent at any time, without affecting prior lawful processing.
• Right to lodge a complaint with a supervisory authority (in Portugal: CNPD).

California (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and sell or share.
• Request deletion of your personal information, subject to exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information — we do not sell or share personal data for cross-context behavioural advertising.
• Limit use of sensitive personal information — we do not collect sensitive personal information through this website.
• Non-discrimination for exercising your privacy rights.

To submit a verifiable consumer request, contact us at hello@splitsecondsystems.com. We will respond within the timeframes required by law (typically 45 days).

Brazil (LGPD)

• Confirmation of processing and access to data.
• Correction of incomplete, inaccurate, or outdated data.
• Anonymisation, blocking, or deletion of unnecessary or unlawfully processed data.
• Data portability to another provider, where applicable.
• Information about entities with whom data has been shared.
• Revocation of consent.
• Right to petition the Autoridade Nacional de Proteção de Dados (ANPD).

Canada (PIPEDA)

• Access to personal information we hold about you.
• Correction of inaccurate or incomplete information.
• Withdrawal of consent, subject to legal or contractual restrictions.
• Challenge our compliance by contacting us or the Office of the Privacy Commissioner of Canada.

Other jurisdictions

Residents of Australia, South Africa, Japan, South Korea, India, and other regions with privacy laws may have additional rights. Contact us and we will honour applicable rights to the extent required by law.

To exercise any right, email hello@splitsecondsystems.com with the subject line "Privacy Rights Request". We may need to verify your identity before fulfilling a request. We do not charge a fee unless a request is manifestly unfounded or excessive.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include access controls, encryption in transit (HTTPS), and secure handling practices. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Third-Party Links & Services

Our website may link to third-party websites or services (e.g. social media). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies. Third-party services currently used to deliver our website may include Google Fonts and CDN-hosted libraries.

11. Children's Privacy

Our website and services are not directed at individuals under 16 years of age (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

12. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

13. Do Not Track

Some browsers offer "Do Not Track" signals. There is no uniform industry standard for responding to these signals. We currently do not respond to Do Not Track signals, but we limit data collection to what is described in this policy.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top will be revised accordingly. Material changes will be communicated where required by law. Continued use of our website after changes constitutes acceptance of the updated policy, where permitted by applicable law.

15. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

If you are in the EU/EEA or UK and believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local data protection authority. In Portugal, this is the CNPD (www.cnpd.pt).