Privacy Policy
Last updated: February 2026
Data Controller
THE-Ö Legal ("we", "us", "our") is the data controller responsible for your personal data. Our office is located at Largo Machado de Assis 2, 1700-116 Lisbon, Portugal. You can contact us at info@the-o.legal or WhatsApp.
What Data We Collect
We collect personal data that you voluntarily provide to us through our contact form, including your name, email address, phone number, and the content of your message. We also collect anonymous usage data through Google Analytics 4 when you consent to analytical cookies.
How We Use Your Data
We use your personal data to respond to your inquiries, provide legal services, and communicate with you about matters relevant to your request. Anonymous analytical data is used to understand how visitors interact with our website and to improve our services.
Legal Basis for Processing
We process your personal data based on your consent (Article 6(1)(a) GDPR) when you submit a contact form or accept analytical cookies, and based on our legitimate interest (Article 6(1)(f) GDPR) in providing and improving our services.
Data Sharing
We do not sell your personal data. We may share your data with Google (for analytics purposes, only with your consent) and with our internal team members who need access to respond to your inquiry. We do not transfer your data outside the European Economic Area unless adequate safeguards are in place.
Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Contact form submissions are retained for the duration of the client relationship and for a reasonable period thereafter.
Your Rights
Under the GDPR and Portuguese data protection law (Lei n.º 58/2019), you have the right to: access your personal data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict processing; object to processing; and data portability. To exercise any of these rights, please contact us at info@the-o.legal.
Contact
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at info@the-o.legal.
Analytics disclosure
We use Google Analytics 4 (measurement ID G-VQF6TG44F3), Meta Pixel (id 2257588791440332) and Ahrefs Analytics on this site. These tools help us understand aggregate traffic, campaign performance and content performance so we can improve the site and reach relevant audiences.
We do not send names, email addresses, phone numbers, free-text form messages, uploaded documents, personal case details or payment information to these analytics providers. Contact-form fields are used only to respond to your enquiry.
First-party attribution storage
To understand which pages, campaigns and channels bring in enquiries, we generate a first-party visitor identifier and store non-personal browsing context in your browser under these keys: theo_visitor_id, theo_session_id, theo_first_touch_v1, theo_last_touch_v1 and theo_session_context_v1. Each contact action also generates a lead_intent_id.
These keys store only URLs you visited on our site, referrers, UTM parameters and click identifiers (gclid, fbclid, msclkid, ttclid) if present in the URL, along with a coarse device category (desktop/tablet/mobile), your browser language and timezone. They do not contain personal data. They are not shared with third-party analytics providers.
Contact form attribution
When you submit a contact form, we attach an internal-only attribution block to the notification we receive (via email, Telegram or webhook), so we can route and follow up appropriately. The block includes the lead intent id, visitor id, session id, source page, service or guide slug, first-touch UTM parameters and campaign, and last-touch page.
This attribution block is internal. It is not shown in the confirmation you receive after submitting the form. Your name, email, phone and message are used only to respond to your enquiry.
Contact form data flow
This attribution block is internal. It is not shown in the confirmation you receive after submitting the form. Your name, email, phone and message are used only to respond to your enquiry.
Server logs
Standard technical server logs (IP address, user agent, requested URL, timestamp) are retained for security, availability and debugging by our hosting infrastructure. These are separate from analytics events.