Privacy Policy

Last updated: 23 September 2026.

1. Data Controller & Data Protection Officer (DPO)

The Data Controller responsible for personal data processed on this website is VORTICEPACIFICO ENGENHARIA LDA (Tax ID PT518972895), situated at Quinta do Feijó, Loja AK 48, 4905-511 Mujães, Viana do Castelo, Portugal.

To exercise your privacy rights or contact our Data Protection Officer, please email: legal@vorticepacifico.com.

2. Data Protection Principles (UK GDPR & DPA 2018)

We process all personal data strictly in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), upholding lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and security.

3. Categories of Personal Data Collected

• Contact & Listing Inquiry Forms: When you use our Feature your clinic or Contact forms, we collect the details you provide: contact name, clinic name, county/region, business email, telephone number, and message.
• Device Geolocation (Local Browser Processing): The "near me" sorting feature is executed 100% locally on your device using the browser's HTML5 Geolocation API. Your GPS coordinates are never sent to or stored on our servers.
• Server Logs & Security Data: For DDoS mitigation and network security, Cloudflare temporarily logs technical connection telemetry (IP address, timestamps, user-agent).

4. Lawful Bases for Processing

• Consent (Article 6(1)(a) UK GDPR): To respond to voluntary general inquiries and messages.
• Contractual Performance (Article 6(1)(b) UK GDPR): To administer, deliver, and invoice paid featured listings for clinic partners.
• Legitimate Interests (Article 6(1)(f) UK GDPR): To maintain cyber security, prevent fraud, and ensure platform reliability.

5. Data Processors & International Transfers

We do not sell, rent, or trade your personal data. Data is only accessible to trusted service providers acting as processors under Article 28 UK GDPR for secure form routing and hosting.

Any international data transfers outside the UK are protected by UK Adequacy Regulations or the UK International Data Transfer Agreement (IDTA) / Standard Contractual Clauses.

6. Data Retention Period

General inquiry records are retained for up to 3 years from the last contact. Commercial contract and billing data are retained for statutory accounting periods (up to 6 years under UK law).

7. Your Data Subject Rights

Under the UK GDPR, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate information.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data.
• Right to Restrict Processing: Request temporary restriction of data processing.
• Right to Data Portability: Receive your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time without affecting past lawful processing.

To exercise your rights, email: legal@vorticepacifico.com.

8. Supervisory Authority

You have the right to lodge a complaint with the UK data protection supervisory authority: Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF (www.ico.org.uk).

9. Children's Privacy

Our service is not intended for individuals under 16 years of age.

10. Security & Encryption

We maintain comprehensive technical safeguards, including 256-bit SSL/TLS encryption for all web traffic.