1. Who we are

This website is operated by BTi - Bossless Tech Industries, a small software studio based in Portugal. BTi - Bossless Tech Industries is the data controller for any personal data processed in connection with this website, within the meaning of the General Data Protection Regulation (GDPR — EU 2016/679).

For any questions regarding this policy or to exercise your rights, contact us at: general@bosslesstechindustries.com.

2. What data we collect

This website does not collect personal data automatically. We do not use analytics tools, tracking pixels, or any third-party data services.

The only personal data we may receive is information you voluntarily provide when you contact us by email — specifically your email address and the content of your message. This data is used solely to respond to your inquiry and is not shared with any third party.

Lawful basis (GDPR Art. 6): We process your email address and message content on the basis of our legitimate interest (Art. 6(1)(f)) in responding to your inquiry. Where your contact relates to a potential or existing service agreement, processing is also justified under Art. 6(1)(b) (performance of a contract or pre-contractual steps).

Retention: Emails and any personal data contained in them are retained only as long as necessary to handle your inquiry. We typically delete correspondence within 90 days of the matter being resolved, unless a longer period is required by law or is necessary to defend against a legal claim.

3. Cookies

We do not set any first-party cookies.

There are no session cookies, preference cookies, analytics cookies, or advertising cookies set by this website. No cookie consent banner is required because we do not use cookies that require consent.

Cloudflare technical cookies: This website is served through Cloudflare's network. As part of its bot management and DDoS protection infrastructure, Cloudflare may set strictly necessary technical cookies (such as __cf_bm) on your device. These cookies are set by Cloudflare, not by us, and are strictly necessary for the security and integrity of the service. They do not track you across websites and do not require your consent under the ePrivacy Directive. They are governed by Cloudflare's Privacy Policy.

Should any non-essential cookies be introduced in the future, this policy will be updated prior to their use and any required consent mechanisms will be put in place.

4. Third-party services & data processors

This website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). As our hosting provider, Cloudflare acts as a data processor on our behalf within the meaning of GDPR Art. 28. In this capacity, Cloudflare may process certain technical data (such as IP addresses and HTTP request metadata) as part of providing hosting, CDN, and DDoS protection services.

Cloudflare's processing is subject to a Data Processing Addendum (DPA) in accordance with GDPR Art. 28, and data transfers outside the EEA are governed by Standard Contractual Clauses (SCCs). For further details, see Cloudflare's Privacy Policy.

We do not embed any social media widgets, advertising networks, or other third-party scripts on this website.

5. Your rights (GDPR)

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR). As described above, the only personal data we may hold about you is data you voluntarily provided by emailing us. Your rights remain valid and are listed below for full transparency:

• Right of access (Art. 15) — you may request confirmation of whether we hold any personal data about you, and a copy of it.
• Right to rectification (Art. 16) — you may ask us to correct inaccurate or incomplete data.
• Right to erasure (Art. 17) — you may ask us to delete any personal data we hold, where no legal obligation requires us to retain it.
• Right to restriction of processing (Art. 18) — you may ask us to restrict how we use your data in certain circumstances (e.g. while a dispute is resolved).
• Right to data portability (Art. 20) — where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object (Art. 21) — you may object to processing based on legitimate interest. We will stop unless we can demonstrate compelling legitimate grounds.
• Right to lodge a complaint (Art. 77) — you have the right to file a complaint with your local data protection authority. In Portugal, the competent authority is the CNPD — Comissão Nacional de Proteção de Dados.

To exercise any of these rights or to ask whether we hold any data about you, contact us at general@bosslesstechindustries.com. We will respond within 30 days as required by GDPR Art. 12.

6. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date. Since we do not collect your email address proactively, we cannot notify you directly — please check back if you have questions.