Privacy Policy
Last updated: November 2026
1. Who we are
PuraRota ("we", "our platform") is the trade name of Saltos Quânticos Lda (company registration number (NIPC) 519659740), the controller of the personal data collected through this website and the client portal. Contact: geral@purarota.pt. Registered office: Rua Lucília Simões, 19B, 1500-386 Lisbon, Portugal.
2. What data we collect
Identification and contact data (name, email, phone, tax ID), data relating to the vehicle you want or wish to trade in (make, model, year, mileage, photos), financial data necessary for the intermediation service (invoicing, payment references — we never process card data directly), the content of messages exchanged with us (chat, WhatsApp, Instagram, Facebook, email, portal), the username and public name that Instagram or Facebook gives us when you message us directly there, and technical browsing data (IP address, cookies — see our Cookie Policy). If you sign in with your Google account, we receive your email, name and profile picture from Google, which we use only to create and authenticate your PuraRota account. We do not access any other data in your Google account.
3. Why we use your data and on what legal basis
Contract performance: managing your import, trade-in, financing or insurance operation. Consent: sending marketing communications, non-essential cookies. Legitimate interest: fraud prevention, service improvement, platform security. Legal obligation: invoicing and record-keeping for the periods required by Portuguese law.
4. Who we share your data with
We only share data with processors strictly necessary to provide the service, all bound by contract to equivalent data protection standards: Supabase (database hosting and authentication), Resend (transactional email delivery), InvoiceXpress (invoicing), Meta (WhatsApp Business, and Instagram and Facebook direct messages, only if you choose these channels), ifthenpay (MB WAY and card payment processing; card details are entered on ifthenpay's secure page and never pass through PuraRota), ScrapingBee (reading vehicle listings you point us to), Google (sign-in with your Google account, only if you choose this method), and Sentry (technical error monitoring, without personal data — see section 8). We never sell your data to third parties.
5. International transfers
Some of the processors above may process data outside the European Economic Area. In such cases, we ensure the transfer relies on the European Commission's Standard Contractual Clauses or an equivalent GDPR-recognised mechanism.
6. How long we keep your data
Data from completed operations and tax documents is kept for the legal retention period for commercial and tax records in Portugal (generally 10 years). Data from leads who never became clients is kept for a maximum of 24 months after the last contact, after which it is deleted or anonymised.
7. Your rights
You have the right to access, rectify, erase, restrict or object to the processing of your data, and to data portability. You can exercise these rights at any time: to export your data, use /privacidade/exportar-dados; to delete your account, use /privacidade/eliminar-conta; for any other request, contact us at geral@purarota.pt. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD), www.cnpd.pt.
8. Data security
We apply appropriate technical and organisational measures: encryption of sensitive data at rest and in transit, role-based access control, audit logging of changes to critical data, and error monitoring with automatic removal of personal information (email, tax ID, IBAN) before anything is sent to technical diagnostic tools.
9. Cookies
This website uses cookies for essential functioning, performance analysis and (only with your consent) marketing. See our Cookie Policy for more detail and to manage your preferences at any time.
10. Minors
Our services are intended for people over 18. We do not knowingly collect data from minors.
11. Changes to this policy
We may update this policy periodically. The last-updated date is always shown at the top of this page. Material changes will be communicated by email to clients with an active account.