Introduction
At Concealed, transparency and respect guide everything we do.
Concealed is a Portuguese agency located at Rua da Fonte, no13, Toledo, 2530-781 Vimeiro LNH, with the VAT number PT 514 292 695. In this Privacy Policy, “Concealed”, “we”, “our”, or “us” refer to Concealed, and “you” or “user” refer to anyone visiting or using our website at https://www.concealed.com/ (“Service”).
This Privacy Policy explains how we collect, use, and protect your personal data when you use our website. Our goal is to make sure you clearly and honestly understand what happens with your data.
Information we collect
Directly provided: name, email, phone, company, account info, communications and any other info you choose to provide.
Automatically collected: IP address, browser and device details, pages visited, time spent, referral sources and general geolocation.
How we collect information
Directly: via forms, email/phone contact and job application.
Automatically: via server logs and analytics tools (see Cookie Policy).
How we use information
We process data to:
Provide and improve our Service.
Analyze performance and usage.
Communicate with you.
Fulfill contractual and legal obligations.
Protect against fraud/abuse.
Legal bases (GDPR): contract, legal obligation, consent (for non-essential cookies/analytics), legitimate interest (e.g., website security, essential server logs, or cookieless analytics for service improvement)
Sharing information
We do not sell your data. We may share it with:
Framer B.V. — hosting and website delivery; may collect IP/browser info for security. Some data may be transferred outside the EEA with safeguards. Framer Privacy.
PostHog, Inc. — analytics. With cookies → requires consent; cookieless → processed under legitimate interest. PostHog Privacy.
Authorities when required by law.
Specific business partners — only after obtaining your explicit, separate consent for that specific purpose and such partners will be named at the time consent is requested.
Analytics tool
PostHog: website usage and UX analytics.
When configured with cookies, PostHog runs on consent.
When configured in cookieless mode, no identifiers are stored and data is processed under our legitimate interest in improving the website performance and user experience (UX). See PostHog Privacy.
Retention
Leads: up to 2 years (Based on legitimate interest for potential future service contracts).
Contracts/invoices: 10 years (Based on legal obligation under Portuguese fiscal and commercial law).
Cookie consents: 13 months (if applicable).
Job applications: 2 years.
Your rights
You have the rights of Access, Rectification, Erasure, Restriction, Portability, and Objection. You also have the Right to Withdraw Consent at any time. You can withdraw consent by changing your cookie preferences (see Cookie Policy) or by contacting us directly at hello@concealed.com. Right to lodge a complaint with CNPD (Comissão Nacional de Proteção de Dados), the Portuguese Data Protection Authority.
Security
We implement technical and organizational measures (encryption, access control, backups) designed to protect your data.
International data transfers
Some providers (e.g., Framer, PostHog) may process data outside the EEA, notably in the United States. Safeguards for these transfers include Standard Contractual Clauses (SCCs), alongside supplementary technical and organizational measures to ensure data protection remains equivalent to EEA standards.
Children’s privacy
Our Service is not intended for children under 16. We do not knowingly collect data from children under 16.
Updates
We may update this Policy. The latest version is always published here.