Legal Information
A chronological timeline of our compliance commitments, data handling practices, and your rights as a client.
Privacy Policy
1.1 Data Controller. LogicWebCraft, located at Avenida dos Banhos 35, 4490-413 Póvoa de Varzim, Portugal, is the data controller responsible for processing your personal data under the General Data Protection Regulation (EU) 2016/679 ("GDPR").
1.2 Data Collection. We collect personal data you voluntarily provide, including your name, email address, phone number, and project details, solely for the purpose of delivering the services you request.
1.3 Legal Basis. Processing is based on: (a) performance of a contract (Art. 6(1)(b) GDPR); (b) your explicit consent (Art. 6(1)(a)); and (c) our legitimate interest in improving services (Art. 6(1)(f)).
1.4 Data Retention. Personal data is retained for the duration of our contractual relationship and for up to 24 months after project completion, unless a longer retention period is required by law.
1.5 Your Rights. You have the right to access, rectify, erase, restrict processing, port data, and object to processing of your personal data. Contact us at [email protected] to exercise these rights.
1.6 Data Transfers. We do not transfer personal data outside the European Economic Area without appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.
Terms of Service
2.1 Service Scope. LogicWebCraft provides web development, API design, system architecture, and deployment services as described in individual project proposals and statements of work.
2.2 Project Milestones. All projects follow a milestone-based structure. Payments are tied to deliverable milestones as outlined in the signed statement of work. Work on subsequent milestones does not commence until the preceding milestone payment is received.
2.3 Intellectual Property. Upon full payment, all custom code, designs, and documentation developed specifically for the client are transferred to the client. LogicWebCraft retains ownership of pre-existing tools, libraries, and frameworks used in the development process.
2.4 Confidentiality. Both parties agree to maintain strict confidentiality of proprietary information shared during the engagement. This obligation survives the termination of the agreement for a period of 36 months.
2.5 Limitation of Liability. LogicWebCraft's total liability shall not exceed the total fees paid by the client for the specific project giving rise to the claim. We are not liable for indirect, consequential, or incidental damages.
2.6 Termination. Either party may terminate with 30 days written notice. Work completed and milestones achieved prior to termination remain payable in full.
Refund & Reimbursement Policy
4.1 Milestone-Based Refunds. Refunds are calculated based on completed and pending milestones. Work already delivered and approved is non-refundable. Deposits for unstarted milestones are eligible for full reimbursement.
4.2 Cancellation Window. If a project is cancelled within the first 7 days of the initial milestone, LogicWebCraft will issue a full refund of any payments made, minus any non-recoverable third-party costs incurred.
4.3 Dispute Resolution. In the event of a dispute, both parties agree to a 14-day good-faith negotiation period before pursuing formal mediation. Governing law is that of the Portuguese Republic.
4.4 Non-Refundable Items. Third-party licensing fees, domain registrations, hosting prepayments, and third-party API subscriptions purchased on behalf of the client are non-refundable once provisioned.
4.5 Processing Time. Approved refunds are processed within 14 business days to the original payment method. Contact [email protected] to initiate a refund request.
Data Handling & Security Audits
5.1 Security Measures. LogicWebCraft implements industry-standard security measures including TLS 1.3 encryption, AES-256 data-at-rest encryption, multi-factor authentication for all administrative access, and regular penetration testing.
5.2 Data Access Controls. Access to client data is restricted on a need-to-know basis. All team members undergo security awareness training and sign data processing agreements in compliance with GDPR Article 28.
5.3 Incident Response. In the event of a data breach, we will notify the relevant supervisory authority within 72 hours and affected data subjects without undue delay, in accordance with GDPR Articles 33 and 34.
5.4 Infrastructure Security. All production systems are hosted on SOC 2 Type II certified infrastructure providers. We conduct quarterly security audits and maintain an active vulnerability disclosure program.
5.5 Data Deletion. Upon request or contract termination, all client data is securely deleted within 30 days using cryptographic erasure methods, unless retention is required by applicable law.
Questions About Our Policies?
Contact us at [email protected] or visit our office in Póvoa de Varzim.
Let's Talk