This policy explains what personal data this site collects, why, and what rights you have over it. It is short because the site collects very little.
Last updated: 28 July 2026
This website is operated by Pedro Miguel Lourenço, an operations and AI strategy advisor based in Porto, Portugal.
For the purposes of applicable data protection law — including the EU General Data Protection Regulation ("GDPR") — I act as the data controller for personal data collected through this website. You can reach me through the contact form.
I collect the following categories of personal data:
Contact data — your name, email address, organisation, role, and message content, when you voluntarily submit the contact form or email me directly.
Publication request data — the email address you provide when requesting a paper or essay, together with the identifier of the publication you asked for.
Usage data — aggregate, anonymised information about how the site is used, collected through privacy-preserving analytics that do not set cookies or identify individual visitors.
I do not collect special-category data under the GDPR, and I do not knowingly collect data from anyone under 16.
Responding to you — to reply to messages and to send the publication you requested. Legal basis: legitimate interests (Article 6(1)(f) GDPR), or your consent where you asked for a file.
Improving the site — to understand which work people find useful. Legal basis: legitimate interests, using analytics that cannot identify you.
Legal obligations — to comply with applicable law where required. Legal basis: Article 6(1)(c) GDPR.
I do not sell, rent, or trade personal data. I do not operate a marketing mailing list, and requesting a publication does not subscribe you to anything.
A small number of third-party providers process data on my behalf, each under a data processing agreement:
Vercel Inc. (United States) — hosting, server logs, and privacy-preserving analytics for this website.
Resend (United States) — transactional email delivery for the contact form and publication requests.
These providers process personal data only on my instructions and only for the purposes described above.
Some providers are located outside the European Economic Area. Where personal data is transferred outside the EEA, it is covered by appropriate safeguards — typically Standard Contractual Clauses approved by the European Commission, or an adequacy decision.
You can request details of the relevant transfer mechanism using the contact details in section 8.
Contact messages are retained for up to 3 years from our last exchange, then deleted.
Publication request records are retained for up to 2 years so I can tell you if a paper is updated or formally published.
Anything I am legally required to keep for longer is retained only for as long as that obligation lasts.
Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format.
To exercise any of these rights, use the contact form and I will respond within one month. There is no charge.
If you believe your data has been handled improperly, you have the right to lodge a complaint with your national supervisory authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD).
For any question about this policy or about how your data is handled, use the contact form.
If this policy changes materially, the updated version will be posted here with a revised date.
Questions about how your data is handled? Get in touch or read the Cookie Policy.