Privacy Policy

1. Data controller

Gonçalo Garcia Soares, a sole trader operating under the Laro brand with professional address at Venda dos Moinhos, 3230-025 Cumeeira, Penela, Coimbra, Portugal, is registered under Portuguese tax number (NIF) 274156385 and is responsible for personal data collected through this website and in connection with the services.

For privacy questions or to exercise your rights, contact geral@laro.pt or +351 931 063 911.

2. Data we may process

Depending on your relationship with Laro, we may process:

• identity and contact details, including your name, email, phone number and emergency contact;
• property details, including location, access instructions, schedules, authorised people and information needed for a visit;
• service records, including visit dates and times, checklists, photographs, observations, alerts and communications;
• contract and billing details, including billing address, tax number, selected plan and payment records;
• limited technical data such as IP address, browser, requested pages and access time, where processed by hosting services for security and delivery.

We do not ask for special-category personal data. Please avoid sending sensitive information that is not needed for the service.

3. Purposes and legal bases

• responding to enquiries and preparing a proposal: steps before entering into a contract;
• arranging visits, delivering the service, maintaining app history and communicating with you: performance of a contract;
• issuing invoices, keeping accounting records and responding to authorities: compliance with legal obligations;
• protecting people, properties, access information and systems, documenting the service and resolving complaints: legitimate interests of Laro and its customers;
• sending unrelated promotional messages: only with consent, which may be withdrawn at any time.

4. How we collect data

We collect data directly from you by email, phone, WhatsApp, during the introductory visit, when entering into a contract and through the Laro app. We may also receive data from a person who legally represents the owner or has been authorised by them.

Required fields are needed to respond or deliver the service. Without them, we may not be able to proceed.

5. Forms, Centro Local, email and WhatsApp

Details submitted through the form are stored in a protected database so that we can respond to the enquiry and prepare a proposal. Access is restricted to people authorised by Laro. The WhatsApp option opens WhatsApp, and data is only shared when you choose to send the message.

Email and WhatsApp process data under their own policies. Do not send alarm codes, digital keys or other access information through these channels unless a suitable delivery method has first been agreed.

For Centro Local, we store the submitted business name, logo, description and link in order to publish the listing. A random identifier is stored in the browser and transformed into an irreversible database code so that only one visit per browser and business is counted. The ranking is not used to assess business quality.

6. Photographs and visit records

Photographs and observations document the visible condition of the property and confirm that a visit took place. We aim to avoid capturing people, documents, number plates or unrelated personal information.

The customer must inform anyone who may be affected by photography and ensure they have authority to grant access and provide the relevant information.

7. Recipients and providers

Data is available only to authorised people and, where necessary, providers supporting Laro with hosting, the app, communications, billing, accounting, insurance, technical support or requested third-party services.

We may disclose data to public authorities when legally required or to third parties where needed to protect people or property in an urgent situation. We do not sell personal data.

8. International transfers

Some technology and communication providers, including WhatsApp, may process data outside the European Economic Area. Where applicable, we use providers that identify an appropriate legal mechanism such as an adequacy decision or standard contractual clauses.

9. Retention

• enquiries that do not become a contract: up to 12 months after the last contact;
• service data and visit history: during the contract and afterwards for as long as needed to handle claims, exercise rights or meet legal obligations;
• tax and accounting documents: for the applicable legal period;
• technical security logs: normally up to 90 days, unless an incident justifies longer retention.

10. Security

We apply organisational and technical measures appropriate to the risk, including access controls, confidentiality duties, data minimisation and provider review. No system is completely infallible; if a relevant incident occurs, we will act as required by law.

11. Your rights

You may request access, correction, deletion, restriction, portability or object to processing, and withdraw consent where consent is the legal basis. Some rights depend on the circumstances and may be limited by legal duties or the need to establish or defend legal claims.

Exercising your rights is free. Email geral@laro.pt. We may ask for reasonable information to confirm your identity.

You may also complain to the Portuguese National Data Protection Commission (CNPD).

12. Cookies and measurement

Laro does not use advertising cookies or create profiles. On Centro Local, a random identifier stored in a strictly necessary cookie lets us count unique visitors and prevent duplicate points without storing an IP address, name or contact details. The hosting provider may also use technology required for security, page delivery and access management. If non-essential tools are introduced, this policy will be updated and consent will be requested where required.

13. Changes and contact

We may update this policy to reflect changes to the service or law. The version in force is the one published on this page with the date shown above. Privacy questions may be sent to geral@laro.pt.