Privacy Policy

01 Who we are

This Privacy Policy applies to the website ar-elia.com and to all services provided by Arelia — Industrial Laundry (hereafter “Arelia”, “we” or “the company”), based in the Algarve, Portugal.

Arelia is the controller of the personal data collected through this website, in accordance with the General Data Protection Regulation (EU Regulation 2016/679 — GDPR) and Portuguese Law no. 58/2019 of 8 August.

02 Data we collect

We collect only the personal data you give us voluntarily when filling in the quote request form, using the ROI calculator, or contacting us by email, telephone or social media. That data may include:

• First and last name of the business contact
• Business email address
• Telephone number (optional)
• Company name and type
• Location and operational data (estimated volume, number of rooms, type of property)
• Messages and any additional information you choose to share with us

We do not collect sensitive data (racial origin, religious beliefs, health data, etc.). We also automatically collect limited technical data through cookies strictly necessary for the site to work.

03 What we use your data for

We process your personal data for the following purposes:

• Respond to quote requests and commercial contacts (legal basis: pre-contractual steps — Art. 6(1)(b) GDPR)
• Produce ROI estimates tailored to your operation
• Communicate with you about our services and answer questions you put to us
• Meet legal obligations, tax and accounting requirements that apply
• Improve our website and the services provided (legitimate interest — Art. 6(1)(f) GDPR)

We do not use your data for automated profiling or for automated decision-making that produces legal effects for you.

04 Data retention

We keep your data only for as long as is strictly necessary for the purposes it was collected for:

• Commercial enquiries without a contract: up to 24 months after the last contact, unless you tell us otherwise
• Active clients: for the whole duration of the contractual relationship and the legal periods that apply after it ends
• Invoicing and accounting: 10 years, under the Portuguese Commercial Code
• Newsletters and marketing communications: until consent is withdrawn

05 Who we share your data with

Your personal data is not sold, rented or passed to third parties for commercial purposes. It may, however, be shared with:

• Technical processors providing services to Arelia (web hosting, email delivery, CRM tools), always bound by a processing agreement under Art. 28 GDPR
• Competent authorities, where required by law (e.g. the tax authority, judicial authorities)

We currently use the following main processors:

• GitHub Pages (Microsoft Corporation) — static hosting of the website
• EmailJS — delivery of the website forms
• Google Analytics 4 (Google Ireland Ltd.) — anonymous traffic analytics, only after consent. IP anonymised, not shared with Google Ads.

Wherever possible, all data stays on servers located in the European Union. Where a transfer to a third country takes place, an adequate level of protection is ensured under Art. 46 GDPR (European Commission Standard Contractual Clauses).

06 Your rights

As the data subject, you have the following rights, which you may exercise at any time:

• Access to the personal data we hold about you
• Rectification of inaccurate or incomplete data
• Erasure (“right to be forgotten”) under the applicable legal terms
• Restriction of processing in certain circumstances
• Portability of the data in a structured, commonly used format
• Objection to processing based on legitimate interest
• Withdrawal of consent, where processing is based on it

To exercise any of these rights, contact us at geral@ar-elia.com. We will reply within 30 days at the latest.

You also have the right to lodge a complaint with the competent supervisory authority — the Portuguese Data Protection Authority (CNPD), through its website www.cnpd.pt.

07 Cookies and traffic analytics

Our website uses two kinds of cookie:

• Strictly necessary cookies for the site to work (display preferences, session management). These require no consent.
• Analytics cookies (Google Analytics 4), used solely to measure anonymous traffic, understand which pages draw most interest and improve the experience. These are only switched on after your explicit consent, through the banner shown on your first visit.

We have implemented Google Consent Mode v2: by default, no analytics or advertising cookie is enabled. The IP address is anonymised, advertising signals (Google Signals) are disabled, and the data is not shared for ad personalisation.

You can change your decision at any time by clearing the site’s cookies in your browser (the banner will reappear), or by setting your browser to refuse cookies. Note that some features may then stop working properly.

More about Google Analytics at policies.google.com.

08 Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or accidental disclosure. These include encryption in transit (HTTPS), access control, the principle of least privilege and internal data protection training.

No transmission over the internet or electronic storage is 100% secure. We undertake, nonetheless, to use commercially acceptable means to protect your personal data.

09 Changes to this policy

We reserve the right to update this Privacy Policy whenever necessary, reflecting legal, technical or operational changes. The date of the last update is shown at the top of this document. We recommend checking it from time to time.