Privacy Policy
Last updated: October 2026
1. Data Controller
The meu.net website and the MeuNet brand (Portuguese national trademark no. 762167, INPI) belong to Roman Melkumov, a sole trader operating in Portugal. Email: geral@meu.net Roman Melkumov is the controller of the personal data collected through this website and the client dashboard, in compliance with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679). The data needed to perform each service is shared only with the provider that performs it (see the Terms of Service, section 3).
2. Personal Data Collected
We collect the following personal data: - Full name - Email address - Phone number - NIF (Tax Identification Number) - IP address and browsing data (cookies) - Account profile data - Preferred language - Messages sent through forms - Billing data (when applicable)
3. Purposes of Processing
Your data is processed for the following purposes: a) Responding to information and quote requests — Legal basis: contract execution / pre-contractual measures (Art. 6(1)(b) GDPR) b) Provision of contracted services — Legal basis: contract execution (Art. 6(1)(b) GDPR) c) Relevant service communications — Legal basis: legitimate interest (Art. 6(1)(f) GDPR) d) Direct marketing and newsletters — Legal basis: consent (Art. 6(1)(a) GDPR) e) Website improvement and statistical analysis — Legal basis: consent via cookies (Art. 6(1)(a) GDPR)
4. Legal Basis for Processing
The processing of your personal data is based on the following GDPR legal bases: - Art. 6(1)(a) — Consent: for direct marketing, newsletters and analytics/marketing cookies - Art. 6(1)(b) — Contract execution: for service delivery and responding to requests - Art. 6(1)(f) — Legitimate interest: for service communications and experience improvement
5. Data Retention
- Lead/request data: 2 years after last contact - Client data: 10 years (legal accounting retention obligation in Portugal) - Marketing/newsletter data: until consent is withdrawn - Cookies: as specified in the Cookie Policy
6. Sharing Data with Third Parties
Your data may be shared with: - Supabase (data hosting — EU) - Stripe (payment processing, when applicable) - Google Workspace (email communications) - Partner service providers (certified accountants, lawyers) — always under confidentiality agreements
7. International Data Transfers
Data is hosted in the European Union. Any transfers outside the European Economic Area (EEA) will only be made with adequate safeguards under Art. 46 of the GDPR.
8. Data Subject Rights
Under the GDPR, you have the following rights: - Right of access to your data - Right to rectification - Right to erasure ("right to be forgotten") - Right to restriction of processing - Right to data portability - Right to object To exercise your rights, contact us at geral@meu.net or through your account profile. We respond within 30 days. You also have the right to lodge a complaint with the CNPD (Portuguese Data Protection Authority).
9. Data Security
We implement appropriate technical and organizational measures to protect your data, including: - SSL/TLS encryption on all communications - Row Level Security (RLS) on the database - Role-based access control - Encrypted storage
10. Cookies
We use essential, analytics and marketing cookies. For detailed information, see our Cookie Policy at /cookies.
11. Policy Changes
We reserve the right to update this policy. Users will be notified of significant changes through the website or by email.
12. Contact
For privacy and data protection questions: Email: geral@meu.net Address: Lisbon, Portugal