Privacy policy

Data controller

Entity

LUSOHUB, UNIPESSOAL LDA

Registered office

Rua 3 da Matinha, Marvila, 1950-326 Lisbon, Portugal

Tax number (NIF)

518793885

Data protection contact

Melanie Ligeiro, hello@luso-hub.com

Accacia is the brand under which LUSOHUB, UNIPESSOAL LDA provides the services described on this site.

Forms: what is sent and where it goes

The forms on this site are stored in our database (Supabase, EU hosting) and delivered by email to hello@accacia.net, so our team can see them and reply. A form is only sent after you tick the consent box.

Each form sends:

• Diagnosis (institutions): name, work email, organisation and entity type.
• Gatherings: name, email, organisation, entity type and format; optionally a preferred date and a message.
• Proposal and Services: the fields shown on that form, never more than what you see on screen.
• Waitlist: name, email, profile, project country and what you are looking for; optionally organisation, mobile or WhatsApp and when you need the funding.

Each submission also carries the page it was sent from, the button that brought you to the form and, if present in the address, the campaign tags (utm). If you accept analytics cookies, those tags are also kept in the browser's session storage until you close the tab, so a form on another page can say how you arrived; they are not cookies and are removed if you withdraw consent. Your IP address is used only at the moment of sending, in memory, to limit the number of requests per minute; it is not stored with the request nor written to our technical logs, which hold no personal data.

We use this data to answer your request and to contact you about the topic you raised. If you join the waitlist, also to email you Accacia news (funding opportunities and services), because you asked for it; you can leave at any time by writing to hello@accacia.net. We do not sell it or pass it to third parties for marketing.

Who processes data on our behalf

We rely on these providers. Each receives only what the stated function needs.

• Microsoft Azure

  Function

  Hosting for the site (Azure Static Web Apps) and for our API, which receives the forms

  Data it receives

  Technical data of each server request (IP address, browser, page requested) and, in transit, the content of the forms

• Supabase (EU hosting, Ireland)

  Function

  Database of our API, where form requests and the waitlist are stored

  Data it receives

  The content of the forms and where they came from (page, button and campaign tags)

• Resend

  Function

  Delivery of the form email to hello@accacia.net

  Data it receives

  The form content while the email is delivered, plus the delivery logs Resend keeps under its own policy

• PostHog (EU hosting)

  Function

  Usage analytics, only after you accept analytics cookies

  Data it receives

  Pages visited, button clicks, form submissions (the fact, not the content), device and browser type, approximate region and referring site, under a pseudonymous identifier

• Microsoft Outlook

  Function

  The hello@accacia.net mailbox, where requests received are kept

  Data it receives

  The content of the forms, in the emails received

• Adobe Fonts

  Function

  Serves the heading typeface from use.typekit.net on every page

  Data it receives

  Your browser's request to Adobe's servers: IP address, browser and the page that requested it. Adobe sets no cookies when serving the fonts

Supabase, Resend and Adobe are US companies. Where data leaves the European Economic Area, this happens under the safeguards the GDPR provides (an adequacy decision or standard contractual clauses), as set out in each provider's policy.

Cookies

We use two kinds of cookies:

• Essential: one cookie (cc_cookie) stores your consent choice for 182 days. It does no tracking.
• Analytics (PostHog): ph_* cookies created only after you accept. If you decline or withdraw consent, they are removed.

You can change or withdraw your consent at any time:

Legal basis

• Forms: your consent (Art. 6(1)(a) GDPR), given in the box you tick before sending. For proposal or service requests, also the steps taken at your request before a contract (Art. 6(1)(b)).
• Analytics cookies: your consent (Art. 6(1)(a)).
• Consent cookie, hosting logs, rate limiting and fonts: our legitimate interest in keeping the site working, secure and readable (Art. 6(1)(f)).

How long we keep data

Requests and waitlist sign-ups stay in our database and our mailbox for 3 years after collection or your last contact with us (for example, replying to an email or asking for information; opening an email does not count). If you leave the list or ask for erasure, we delete your data, keeping only what is needed to honour that request.

Analytics data is pseudonymous and kept by PostHog under our agreement with it; collection stops as soon as you withdraw consent.

Your rights

At any time you can ask for access to your data, its correction, deletion or restriction, object to processing, ask for portability and withdraw consent, without affecting processing done until then. Write to hello@luso-hub.com to do so. We reply within the one month the GDPR sets.

You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD): cnpd.pt

Changes to this policy

We update this page whenever the way we handle data changes, for example if we start storing requests in a database. The date at the top shows the version in force.