Privacy Policy

Last updated: 17 September 2026

1. Who we are

This website (depot42.com) is operated by Andrei Davydov, a sole trader based in Portugal (NIF 318413760).

Contact: [email protected]

2. What data we collect and why

2.1 Contact form

When you submit the contact form, we collect your name and a contact method (email, phone or messenger handle). This data is used solely to respond to your enquiry. The form is powered by Formspree (Formspree Inc., USA), which acts as a data processor under a Data Processing Agreement. Data is retained for as long as necessary to handle your enquiry and no longer than 2 years.

Alongside your message we also submit how you reached this site: campaign tags (UTM) from the link you followed, the referring website, the page you landed on and the page you submitted from. We use it only to understand which channels bring enquiries. It contains nothing that identifies you beyond what you typed yourself, and it is stored with the enquiry in Formspree.

Legal basis: Legitimate interest (GDPR Art. 6(1)(f)) — to respond to business enquiries.

2.2 Analytics (Google Analytics via GTM)

With your consent, we use Google Analytics 4 (Google LLC, USA) via Google Tag Manager to understand how visitors use this website. Google Analytics collects anonymised usage data (pages visited, time on site, device type). Google LLC is certified under the EU–US Data Privacy Framework, providing adequate data transfer safeguards.

Legal basis: Consent (GDPR Art. 6(1)(a)). Analytics are only activated after you click "Accept" in the cookie banner. You may withdraw consent at any time by clearing your browser's localStorage or clicking "Decline" on revisit.

2.3 Hosting and CDN

The site is hosted on Cloudflare Pages (Cloudflare Inc., USA). Cloudflare processes technical data (IP addresses, request logs) as a data processor for the purpose of delivering the website. Cloudflare Inc. participates in the EU–US Data Privacy Framework.

3. Your rights under GDPR

As a resident of the EU/EEA, you have the right to:

  • Access — request a copy of any personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — request deletion of your data ("right to be forgotten").
  • Restriction — ask us to limit how we use your data.
  • Portability — receive your data in a machine-readable format.
  • Object — object to processing based on legitimate interest.
  • Withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese data protection authority: CNPD (cnpd.pt).

4. Cookies

We use cookies for analytics purposes only, and only with your consent. See our Cookie Policy for details.

5. Third-party links

This website may contain links to third-party sites. We are not responsible for their privacy practices.

6. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use of the site after changes constitutes acceptance of the updated policy.