Privacy Policy

Last updated: April 2026

This Privacy Policy explains how RIPDat, based in Leiria, Portugal ("we", "us", "our"), collects and processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Portuguese law.

If you have any questions, contact us at info@ripdat.com.

1. Who is the Data Controller?

The data controller is:

• Name: RIPDat
• Location: Leiria, Portugal
• Email: info@ripdat.com

2. What Data We Collect

2.1 Contact & Quote Form

When you submit our quote request form, we collect:

• First name and last name
• Company or organisation name (optional)
• Email address
• Service type requested
• Approximate number of tapes
• Any additional details you choose to include in your message

Legal basis: Performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR).

2.2 Physical Tapes

When you send us DAT tapes for migration, the tapes themselves may contain personal or business data. We access the content of your tapes solely to perform the requested service. We do not retain, copy, or share any data found on the tapes beyond what is necessary to deliver the migration results to you.

Legal basis: Performance of a contract (Article 6(1)(b) GDPR).

2.3 Spam Protection (Google reCAPTCHA)

Our contact form uses Google reCAPTCHA v2, provided by Google LLC, to distinguish human users from automated bots. reCAPTCHA may collect hardware and software information, including device and application data, and send it to Google for analysis. This processing occurs before form submission and is necessary to protect the integrity of our contact form.

Legal basis: Legitimate interests (Article 6(1)(f) GDPR) — preventing spam and abuse of our contact form. reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.

2.4 Analytics (Google Analytics)

With your consent, we use Google Analytics 4 to understand how visitors interact with our website. This involves the collection of anonymised usage data (pages visited, session duration, device type). IP addresses are anonymised before processing. No data is shared with third parties for advertising purposes.

Legal basis: Consent (Article 6(1)(a) GDPR). You may withdraw consent at any time by clearing your browser's local storage or by declining when the cookie banner is shown.

3. How We Use Your Data

• To respond to your quote request and communicate about your order
• To perform the DAT tape migration service you have requested
• To send you the result of your migration and return your original tapes
• To issue invoices and maintain accounting records as required by Portuguese law
• To improve our website and service (analytics, consent-only)

4. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data may be shared only in the following limited circumstances:

• Courier companies (CTT, DHL, DPD, or similar) — solely for the purpose of shipping your tapes and delivering your order. Only the necessary shipping details are shared.
• Google LLC — for website analytics (consent-only) and for spam protection via reCAPTCHA (legitimate interests). Google processes data under Standard Contractual Clauses and is subject to Google's Privacy Policy.
• Legal obligations — if required by applicable law or a competent authority.

5. Data Retention

We retain your contact and order information for as long as necessary to fulfil the service and comply with our legal obligations under Portuguese accounting and tax law (generally up to 10 years for invoicing records). After that period, data is securely deleted.

Analytics data collected via Google Analytics is retained in accordance with Google's standard retention settings (up to 26 months by default, configurable).

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access — to obtain a copy of the data we hold about you.
• Right to rectification — to correct inaccurate data.
• Right to erasure — to request deletion of your data, subject to legal obligations.
• Right to restriction of processing — to limit how we use your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests.
• Right to withdraw consent — for analytics, at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@ripdat.com. We will respond within 30 days.

7. Supervisory Authority

If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Portuguese data protection authority:

8. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. Our website is served over HTTPS. Form submissions are processed by Netlify, which maintains its own security standards.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.

10. Contact

For any privacy-related questions or requests, contact us at info@ripdat.com.