Privacy

Who is responsible

Wonderhive - Unipessoal Lda, trading as WonderHive. Registered address: Lugar Dom Constantino de Bragança, Nº 3 Rc e 2720-162 Amadora. Fiscal identifier: PT518378837. Contact: pedro.abrantes@wonderhive.org.

WonderHive determines the purposes of its own business-contact, account, authorization, billing and service-security administration. Contact us at pedro.abrantes@wonderhive.org for privacy requests.

Data, purposes and legal bases

We use business-contact details, account identifiers, correspondence, domain-authorization records and order references to respond to requests and administer the business relationship. We use necessary technical and access records to operate the service and prevent misuse. These purposes rely on our legitimate interests in providing a safe business service and maintaining the relationship, subject to individuals’ rights.

Where an individual professional contracts directly with us, we process the information needed to perform that contract. We keep information required for billing and legal duties under the applicable legal obligation. Optional marketing requires a separate choice. A service request or purchase does not by itself subscribe you to marketing.

The order identifies the authorized domain and evidence to collect. Public technical evidence can include domain, DNS, certificate, response, performance and accessibility information. Public availability does not remove protection from personal data that appears in a page or report. Do not provide personal records, sensitive content or credentials beyond the agreed scope.

Who receives information

Access is limited to authorized people and service providers supporting the requested hosting, authentication, communications, payments and operation. We may disclose information where legally required or necessary to establish or defend a legal claim. This is not permission to publish a customer report or use it as a public sample.

Leaseweb provides our production hosting infrastructure. It publishes data-processing terms within its applicable sales contract. See Leaseweb’s privacy and personal-data-protection information. This hosting arrangement does not mean that every service provider processes data in the same location.

Stripe processes payment and transaction information. See Stripe’s privacy notice for its purposes, roles, recipients and international processing. Where you choose Google sign-in, see Google’s privacy notice for that authentication service.

Where certificate-transparency checks use them, Sectigo’s crt.sh and SSLMate’s Certificate Spotter receive the queried domain name. A customer-specific processing scope identifies providers relevant to personal data handled on your instructions before that processing starts.

Retention criteria

We keep business-contact and account information while needed to handle the request or active relationship. We keep billing records for applicable legal duties. We retain authorization, dispute and security evidence for the relevant operational, legal or claim-defense need. We review the purpose and remaining need when a request closes, an account ends or a deletion request arrives.

Where an account offers a scan-retention control, its setting concerns the applicable scan records. It does not mean that legally required billing records or every backup copy is immediately erased. The processing scope specifies retention and return or deletion for personal data handled on your instructions.

International processing and safeguards

We do not promise that all processing stays in the EEA. Stripe and optional Google services describe their international handling and safeguards in their linked notices. Ask pedro.abrantes@wonderhive.org for the providers, locations and applicable transfer information relevant to your service. Before customer-instructed personal evidence is collected, its agreed processing scope must identify any relevant transfer arrangement. This notice does not claim that an unlisted customer-specific arrangement is already complete.

Your choices and rights

You may request access, correction, erasure or restriction where applicable. You may object to processing based on legitimate interests and request portability where its conditions apply. You may withdraw consent without affecting processing that was lawful before withdrawal. Some information may need to remain for a legal duty or legal claim.

Contact pedro.abrantes@wonderhive.org with your request. You may also complain to the Portuguese data-protection authority, CNPD, or another competent supervisory authority. We may need proportionate information to verify a request.

Information necessary to identify the business, authorize the domain, administer the account or bill the service is required for those purposes. Without it, we may be unable to provide the requested service. Optional marketing is not required.

Customer-instructed evidence

If we process personal data solely on customer instructions, or act as an agency’s subprocessor, agree the actual roles and binding processing terms first. Define the data, purposes, scope, duration, security, recipients and return or deletion arrangements. These public terms do not replace a completed engagement-specific agreement. Do not send such evidence before that scope is agreed.

Newsletter

An email address entered with feedback is contact data for that feedback only. It does not give WonderHive permission to send marketing email.

You join the newsletter only after you submit the separate newsletter form and confirm the email address. Confirmation links expire after seven days. Pending requests expire after 30 days.

WonderHive stores your normalized email address while your request is pending or your subscription is active. WonderHive removes the address after you unsubscribe. We keep a keyed suppression hash until you confirm a later subscription.

WonderHive keeps consent proof while the subscription is active. We keep it for 365 days after the final state change. Each newsletter has a visible one-click unsubscribe control.