Last updated: 29 October 2026
1. Who is responsible for your data
The controller of the personal data collected on this website is André Silva, who provides artificial intelligence consulting and training services as a self-employed individual in Portugal, under the IAConsulting brand.
- Portuguese tax number (NIF): 305557793
- Address: Rua do Armeiro Mor, 2805-093 Almada, Portugal
- Email: contacto@iaconsulting.me
A data protection officer is not required. Any privacy question can be sent to the email above.
2. What data we collect and why
Requesting the risk matrix
When you request the AI governance risk matrix, we collect your email address, your answer to the updates option, the page language and the date and time of the request. We use this data to send you the matrix and answer questions about it.
Legal basis: steps taken at your request (Article 6(1)(b) GDPR).
Occasional updates
Only if you tick the option in the form, we use your email to send you occasional updates on AI and regulation.
Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time through the unsubscribe link in every email or by writing to the email above. Withdrawal does not affect the lawfulness of processing carried out before it.
Contacts by WhatsApp and email
When you contact us, we process your name, phone number or email, the content of your messages and any information you choose to share, to answer your request, prepare proposals and deliver the services agreed.
Legal basis: pre-contractual steps and performance of a contract (Article 6(1)(b) GDPR).
Delivering services and invoicing
If you become a client, we process the identification and billing data needed to issue invoices and meet tax and accounting obligations.
Legal basis: compliance with legal obligations (Article 6(1)(c) GDPR).
Running and securing the website
The hosting provider may log IP addresses and technical request data (such as browser, date and time) to keep the website secure and working.
Legal basis: legitimate interest in keeping the website secure and available (Article 6(1)(f) GDPR).
Please do not send special categories of personal data, or confidential information that your request does not need, through the form, WhatsApp or email.
3. Cookies and similar technologies
This website does not use cookies, traffic analytics or advertising trackers, and its fonts are hosted on the website itself, with no requests to third-party services. That is why no cookie banner is shown. If this changes, this policy will be updated and, where the law requires it, your consent will be asked for first.
4. Who has access to the data
We use the following providers, who process data only on our behalf, on our instructions and under contracts that meet Article 28 GDPR:
- Website hosting, DNS and incoming email: Cloudflare, Inc.
- Matrix requests, email sending and updates: Sendinblue SAS (Brevo), based in France
- Mailbox: Google LLC (Gmail)
If you contact us on WhatsApp, your messages go through the service of WhatsApp Ireland Limited, which also processes data under its own terms and privacy policy.
Your data is not sold or shared with third parties for marketing. It may be disclosed to public authorities where the law requires it.
5. Transfers outside the European Economic Area
Cloudflare and Google are based in the United States. In those cases, transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, where the provider is certified, or on standard contractual clauses approved by the European Commission (Article 46 GDPR). You can ask for information about the safeguards in place at the email above.
6. How long we keep data
- Matrix requests: up to 24 months after the last contact, unless you become a client in the meantime.
- Updates: until you withdraw your consent.
- Contacts and proposals that do not lead to a contract: up to 24 months after the last contact.
- Client and billing data: for the legal retention periods for tax and accounting records.
- Hosting logs: for the period set by the hosting provider, normally short.
7. Your rights
You can ask for access to your data, its rectification or erasure, restriction of processing and portability, object to processing, including for marketing, and withdraw consent at any time. To exercise these rights, write to contacto@iaconsulting.me. We reply within one month at the latest.
You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt), or with the authority of your country of residence.
8. Automated decisions
We do not make solely automated decisions or profile you based on your data.
9. Changes to this policy
This policy may be updated. The date of the last update is shown at the top of the page.
Back to the website