PRIVACY POLICY
Last updated: 18 September 2026
1. WHO WE ARE
This website (the "Site") is operated by Sterifast – Sterilization & Disinfection Systems, Lda. ("Sterifast", "we", "us", "our"), a company registered in Portugal.
Registered office: Parque Empresarial do Padrão, Lote 11, 5460-343 Boticas, Portugal
Tax identification number (NIPC): PT510113060
Email: info@sterifast.com
Telephone: +351 276 418 287
Sterifast is the controller of the personal data described in this Privacy Policy. For questions about this Policy or our processing of your personal data, please contact us using the details above.
2. SCOPE OF THIS POLICY
This Privacy Policy explains how we collect and process personal data when you visit the Site, contact us through it, request or use a customer account, sign in, or access technical documentation made available to registered users. It does not describe every processing activity carried out by Sterifast through other business channels, such as quotations, orders, invoicing, technical service or other communications handled outside the Site.
3. PERSONAL DATA WE PROCESS
a) Contact and enquiry data
When you contact us through the Site, we may process your first and last name, company name, email address, telephone number, country, enquiry type, the content of your message and any other information you choose to provide.
b) Customer account and access data
When an account is requested, created or administered for access to customer services or technical documentation, we may process your name, company name, email address, telephone number, account identifier, user role, account and approval status, and information necessary to administer and secure your account.
Authentication credentials are handled through our authentication provider. Passwords are not displayed to Sterifast through the Site.
c) Technical and security data
When you use the Site, our hosting, security and authentication infrastructure may process technical information such as IP address, browser and device information, request and access timestamps, and other information necessary to deliver, secure and troubleshoot the service.
We do not currently use advertising or profiling technologies on the Site, and we do not use personal data for automated decision-making or profiling.
4. WHY WE PROCESS PERSONAL DATA AND OUR LEGAL BASES
| Purpose | Typical data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Respond to enquiries and requests submitted through the Site | Contact, company and message data | Art. 6(1)(b) — steps taken at your request before entering into a contract, where applicable; and/or Art. 6(1)(f) — our legitimate interest in responding to business enquiries |
| Create, administer and secure customer accounts | Identity, contact, company, account and authentication-related data | Art. 6(1)(b) — performance of a contract or steps taken at your request, where applicable; and/or Art. 6(1)(f) — our legitimate interest in managing secure access to customer services |
| Review and manage eligibility for restricted technical documentation | Company, account, role and approval data | Art. 6(1)(f) — our legitimate interest in controlling access to business and technical resources |
| Operate, protect, maintain and troubleshoot the Site and related systems | Technical, access and security data | Art. 6(1)(f) — our legitimate interest in the security, availability and proper functioning of our systems |
| Comply with applicable legal obligations | Relevant personal data as required | Art. 6(1)(c) — compliance with a legal obligation |
Where we rely on legitimate interests, we consider those interests against the rights and freedoms of the individuals concerned. Where processing is based on consent in a specific situation, you may withdraw that consent at any time without affecting processing already carried out lawfully before withdrawal.
5. CUSTOMER ACCOUNTS AND TECHNICAL DOCUMENTATION
Certain technical documents are restricted to approved customers or authorised Sterifast staff. We use account information and access permissions to authenticate users and determine which resources are available to them. Access decisions are based on account role and approval status configured by Sterifast.
If an account is disabled, rejected or deleted, access to restricted resources may be suspended or terminated. You may contact us if you believe your account information or access status is incorrect.
6. COOKIES AND LOCAL STORAGE
The Site uses technical browser storage and authentication mechanisms that are necessary to maintain secure sign-in sessions and provide account-related functionality. The Site may also use short-lived browser session storage for interface functions, such as displaying a one-time sign-in confirmation.
We do not currently use advertising, profiling or non-essential analytics cookies on the Site. Accordingly, the Site does not currently place non-essential cookies for those purposes. If we introduce technologies that require consent in the future, we will update this Policy and implement an appropriate consent mechanism before using them where required by law.
7. SERVICE PROVIDERS AND RECIPIENTS
We do not sell personal data. We may disclose or make personal data available to service providers that support the operation of the Site and act for the relevant processing purposes, including:
- Cloudflare — website hosting, content delivery, network security and related infrastructure;
- Supabase — database, customer account authentication, account-related data and protected document infrastructure;
- Formspree — processing and delivery of submissions made through the website contact form. \n
- Google Maps — embedded mapping functionality used on the Contact page. When the embedded map loads, technical information such as your IP address and browser or device information may be transmitted to Google in order to provide the map service.
Personal data may also be accessible to authorised Sterifast personnel who need it for customer support, account administration, document access management, website operation or related business purposes.
Service providers may use approved subprocessors in providing their services. Where processing involves an international transfer of personal data subject to the GDPR, Sterifast and/or its service providers use an applicable lawful transfer mechanism and appropriate safeguards as required by data protection law.
8. DATA RETENTION
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, taking into account the nature of the relationship, security requirements, applicable limitation periods and legal obligations.
Contact enquiries and related correspondence are normally retained while the enquiry or resulting business relationship remains relevant and, afterwards, only for the period reasonably necessary for business records, the establishment, exercise or defence of legal claims, or compliance with applicable obligations.
Customer account data is normally retained while the account or related customer relationship remains active. After an account is closed, disabled or no longer required, relevant information may be retained for a limited period where necessary for security, audit, dispute resolution or legal compliance, after which it will be deleted or anonymised where appropriate.
Technical and security records are retained according to operational and security needs and the retention settings of the relevant infrastructure providers. We periodically review whether personal data remains necessary for the purposes for which it is held.
9. INTERNATIONAL DATA TRANSFERS
Some of the service providers used to operate the Site are international organisations or may process data through infrastructure or subprocessors located outside the European Economic Area. Where the GDPR requires safeguards for such transfers, appropriate mechanisms are used, which may include adequacy decisions or the European Commission's Standard Contractual Clauses, as applicable.
10. YOUR DATA PROTECTION RIGHTS
Subject to the conditions and limitations established by applicable data protection law, you may have the right to:
- request access to personal data concerning you;
- request correction of inaccurate or incomplete personal data;
- request erasure of personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive personal data in a portable format where the right to data portability applies; and
- withdraw consent at any time where consent is the legal basis for processing.
To exercise a right or ask a privacy-related question, contact us at info@sterifast.com. We may need to verify your identity before acting on a request. We will respond within the time limits required by applicable law.
You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or, where applicable, another competent data protection supervisory authority.
11. SECURITY
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include encrypted HTTPS connections, access controls and security features provided by our infrastructure and authentication services.
No internet-based service can be guaranteed to be completely secure. Users are responsible for keeping their account credentials confidential and should contact Sterifast if they suspect unauthorised use of their account.
12. THIRD-PARTY LINKS
The Site may contain links to websites or services operated by third parties. Their privacy practices are governed by their own policies, and Sterifast is not responsible for the privacy practices of third-party websites that we do not control.
13. CHILDREN
The Site and its customer account functionality are intended for business and professional audiences and are not directed at children. We do not knowingly use the Site to collect personal data from children.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes in the Site, our processing activities, service providers or applicable legal requirements. When we make changes, we will update the "Last updated" date at the top of this page. Where required, we will provide additional notice of material changes.
15. CONTACT
Sterifast – Sterilization & Disinfection Systems, Lda.
Parque Empresarial do Padrão, Lote 11, 5460-343 Boticas, Portugal
Email: info@sterifast.com
Telephone: +351 276 418 287