Privacy policy

Xpertsoft is a brand of FINDMORE Consulting, SA, a Findmore Group company, with registered offices at Av. D. João II, Edifício Mythos Lote 1.06.2.1A, 6º Piso, Escritório 2, 1990-095 Lisboa, Portugal. For the purposes of the EU General Data Protection Regulation (GDPR), FINDMORE Consulting, SA is the controller of personal data collected through this website.

Data protection contact (DPO): DPOFindmore-GDPR@findmore.eu. The group-wide privacy statement is available at findmore.pt/privacy-policy; this page describes specifically what happens on xpertsoft.com.

Forms you submit. When you use the contact form or request a plan from the team planner, we collect the details you type: name, work email, company and any context you share. Planner submissions also include the answers you selected (team shape, engagement model, timeline) and the indicative estimate generated. We use this exclusively to respond to your enquiry — it is stored in our own systems, in the EU, and a notification is emailed to our team. Legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries.

Analytics (only with your consent). Our cookie banner lets you allow analytics and advertising separately. If you allow analytics, we use PostHog to understand how the site is used — pages visited, referring site, browser and approximate location derived from your IP, and interactions such as progressing through the team planner. We use this to improve the site. Nothing loads before you allow it, and saying no changes nothing about how the site works. Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via Cookie preferences.

Google advertising (only with your consent). If you allow advertising, we use Google Ads to know when a visit that started from one of our ads leads to an enquiry, so we can tell which campaigns work, and to show our ads on Google and its partner sites to people who have visited this site (remarketing). Google does not share with us who you are: we only ever see audience totals. You can also turn off personalised ads in your Google ad settings. Legal basis: consent (Art. 6(1)(a) GDPR), withdrawable at any time as above.

LinkedIn advertising (only with your consent). With the same advertising consent, we use the LinkedIn Insight Tag to measure the results of our LinkedIn campaigns, to see aggregated, anonymised insights about the professional audience visiting the site (such as industry or job function), and to show our ads on LinkedIn to people who have visited this site (retargeting). If you are a LinkedIn member, LinkedIn matches your visit to your account to make this possible, but it does not share with us who you are: we only ever see audience totals. For this data, LinkedIn Ireland Unlimited Company acts as joint controller with us, and you can also opt out of this kind of advertising in your LinkedIn ad settings. Legal basis: consent (Art. 6(1)(a) GDPR), withdrawable at any time as above.

Company identification (only with your consent). With your analytics consent, we identify the company a visit may originate from, based on the network IP address, using our own lookup against public internet registry (RDAP) data. This tells us, for example, that someone from a given organisation viewed our services — it does not identify you personally.

Article reading counts. We count views of our articles using a first-party counter that stores only an aggregate daily number — no cookies, no identifiers, no personal data.

This site sets no tracking cookies by default. If you allow analytics, PostHog sets cookies/local storage to recognise returning visits. If you allow advertising, Google Ads sets cookies (such as _gcl_*) to attribute enquiries to our own ads and to show our ads to past visitors. The LinkedIn Insight Tag sets first-party cookies (such as li_fat_id) and LinkedIn's own cookies to measure campaign results and to show our ads to past visitors on LinkedIn. Your choice is remembered in your browser. You can change it at any time using Cookie preferences (also available in the footer), which clears any tracking cookies already set.

We use a small number of service providers (processors) to run this website:

• Resend (email delivery, USA) — sends form notifications and the plans you request.
• PostHog (analytics, USA) — only after your consent.
• Google (Google Ads conversion measurement and remarketing, USA) — only after your consent.
• LinkedIn (Insight Tag, campaign measurement and retargeting, Ireland/USA) — only after your consent.

Form submissions themselves are stored on infrastructure operated by the Findmore Group in the EU. Your data may also be shared within Findmore Group companies where needed to respond to your enquiry. We do not sell personal data.

Where providers process data outside the European Economic Area (Resend, PostHog, Google and LinkedIn, in the USA), transfers are safeguarded by the EU Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

Form and planner submissions are kept only for as long as needed to handle your enquiry and any follow-up conversation, and are periodically deleted once resolved. Analytics data is retained under PostHog's standard retention. You can ask us to delete your submission at any time — see below.

Under the GDPR you can ask to access, correct, delete or receive a copy of your personal data, restrict or object to its processing, and withdraw consent at any time. Write to DPOFindmore-GDPR@findmore.eu and we will respond. You also have the right to lodge a complaint with a supervisory authority — in Portugal, the CNPD (cnpd.pt).

If we change what this website collects or how, we will update this page and its date. Substantive changes will be flagged on the site.