Privacy Policy

Last updated: 15 January 2026

Introduction

CoreInsights Lda. ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website coreinsights.world or use our services. Please read this privacy policy carefully to understand our views and practices regarding your personal data and how we treat it.

Data Controller Information

The data controller for your personal information is CoreInsights Lda., a company registered in Portugal with registration number 498756231, VAT number PT498256473, and registered address at Avenida dos Aliados 85, 4055-714 Porto, Portugal.

Data We Collect

We may collect and process the following types of personal data about you:

  • Contact Information: Name, email address, telephone number, company name, and postal address
  • Website Usage Data: IP address, browser type, operating system, referring URLs, pages viewed, and time spent on pages
  • Communication Data: Records of correspondence when you contact us, including messages sent through our contact forms
  • Marketing Data: Your preferences in receiving marketing communications and your communication preferences
  • Technical Data: Device information, connection information, and statistics on page views

How We Use Your Information

We process your personal data for the following purposes and under the following legal bases:

  • Service Provision: To provide our digital finance infrastructure strategy services (Legal basis: Contract performance)
  • Communication: To respond to your enquiries and provide customer support (Legal basis: Legitimate interest)
  • Marketing: To send you relevant marketing communications where you have consented (Legal basis: Consent)
  • Website Improvement: To analyse website usage and improve our services (Legal basis: Legitimate interest)
  • Legal Compliance: To comply with legal obligations and protect our legal rights (Legal basis: Legal obligation)

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about the cookies we use, please see our Cookie Policy.

Data Sharing and Disclosure

We may share your personal data with:

  • Service Providers: Third-party companies that provide services on our behalf, such as website hosting, analytics, and marketing tools
  • Legal Authorities: When required by law or to protect our legal rights
  • Business Transfers: In the event of a merger, acquisition, or sale of assets

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Contact information is typically retained for 7 years after our last interaction. Website analytics data is retained for 26 months. Marketing consent data is retained until you withdraw consent or for 3 years of inactivity.

Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate personal data
  • Right to Erasure: Request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: Request limitation of processing in certain circumstances
  • Right to Data Portability: Request transfer of your data to another organisation
  • Right to Object: Object to processing based on legitimate interests or for marketing purposes
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions by the European Commission or appropriate safeguards like Standard Contractual Clauses.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, please note that no method of transmission over the internet or electronic storage is completely secure.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us:

Email: privacy@coreinsights.world

Phone: +351 221 671 301

Post: CoreInsights Lda., Avenida dos Aliados 85, 4055-714 Porto, Portugal

Complaints

If you believe that we have not handled your personal data in accordance with this Privacy Policy or applicable data protection laws, you have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados - CNPD) or your local supervisory authority.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

Governing Law

This Privacy Policy is governed by Portuguese law and the General Data Protection Regulation (GDPR). Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the Portuguese courts.