Privacy Policy

1. Who we are (Data Controller)

Esplendido Unipessoal Lda ("Esplêndido", "we"), PT company/tax no. 517980380, with registered office at Avenida da Liberdade 224, 2.º Andar, 1250-148 Lisbon, Portugal, is the controller of your personal data in the context of the Esplêndido application and services. Privacy contact: suporte@esplendidoapp.com.

2. What data we collect

• Identification and contact — name, email, phone, password (encrypted).
• Addresses and location — service addresses and coordinates used to validate the professional's arrival on site.
• Payment — securely processed by Stripe; we do not store the full card number.
• Service content — attached photos, notes, ratings and order history.
• Professionals — tax number, IBAN, ID document, photo and data required for payouts (Stripe Connect).
• Technical data — device identifiers (push notifications) and access logs.

3. Why we use the data and legal basis (GDPR)

• Providing the service (booking, execution, payment, rating) — performance of the contract (art. 6(1)(b)).
• Processing payments and payouts — performance of the contract and legal obligation.
• Service communications and notifications — performance of the contract / legitimate interest.
• Professional vetting and safety — legitimate interest / legal obligation.
• Marketing — only with your consent (art. 6(1)(a)), which you can withdraw at any time.
• Compliance with legal and tax obligations — legal obligation (art. 6(1)(c)).

4. Who we share with

We share only what is necessary with processors that provide services to us, under data processing agreements:

• Stripe — payment processing and payouts to professionals.
• Google / Firebase — authentication (login) and push notifications.
• Google Maps — address validation (geocoding).
• Amazon Web Services (AWS) — server hosting and storage of photos and documents, in the European Union (Ireland region).
• Resend — transactional email delivery.
• Professionals — receive only the data strictly necessary to perform the service; the customer's full address is only revealed close to the service time.

5. International transfers

Some of these providers may process data outside the European Economic Area. When that happens, it is always with adequate safeguards, notably Standard Contractual Clauses approved by the European Commission.

6. How long we keep data

We keep data while the account is active and for the period necessary to fulfil the purposes and legal obligations — notably tax obligations, up to 10 years for invoicing documents. After that period, data is deleted or anonymised.

7. Your rights

Under the GDPR you have the right of access, rectification, erasure ("right to be forgotten"), restriction, portability and objection, as well as the right to withdraw consent at any time. To exercise these rights, contact suporte@esplendidoapp.com.

You also have the right to lodge a complaint with the supervisory authority — in Portugal, the CNPD (Comissão Nacional de Proteção de Dados, www.cnpd.pt).

8. Security

We adopt appropriate technical and organisational measures: encrypted communications (HTTPS/TLS), encrypted passwords, role-based access control, backups and secure storage of photos and documents.

9. Minors

The services are intended for people aged 18 or over. We do not knowingly collect data from minors.

10. Changes

This policy may be updated. The version in force is always available in the app and at esplendidoapp.com/privacidade, with the last-updated date at the top.