Privacy
Last updated 20 October 2026
This policy explains what personal data I collect, why, and what you can do about it. I'm based in Portugal, so the EU General Data Protection Regulation (GDPR) applies to everything I do, including work for US companies.
Who is responsible
Simão Marques, sole proprietor, Portugal. Contact for anything privacy-related: simao@simaomarques.com.
If I emailed you
I contact freight brokerages by email or phone about my services. For that I use your name, your business email address, your company's name, website and phone number, and public facts about the company, such as its size, the software it uses and its job ads.
- Where it came from: your company's filing with the US Federal Motor Carrier Safety Administration (FMCSA), or your company's own website. Company size comes from public US government records. I never guess addresses. Before emailing, I check the address can receive mail, using software on my own server.
- Why I may use it: legitimate interest in offering a business service to a business, at a published business address (GDPR art. 6(1)(f)).
- To stop it: reply to any email, or tell me on the call. I add your address or number to a block list the same day, and you won't hear from me again. I keep only that on the block list, so the opt-out keeps working.
- How long: your details stay in my sending tool while the emails are running. I keep them, with short notes from any call, in my own lead list for up to 24 months after the last email or call, then delete them.
If we talk or work together
- Booking details. When you book a call, Google Calendar collects your name, email and the answers you give (company, loads a month, TMS), so I can prepare for the call.
- Emails and notes from our conversations, to answer you and do the work.
- Call recordings and transcripts. Only if you say yes at the start of the call, and you can change your mind at any time. They're used only to write your breakdown accurately, never to train AI models, and deleted 90 days after the call, unless you become a client.
- Client documents such as rate confirmations, used only to build and run your system, under our agreement.
- Payment and invoicing details, kept as long as Portuguese tax law requires (10 years for invoices).
The legal basis is taking steps toward, or performing, a contract with your company (art. 6(1)(b)), your consent for call recordings (art. 6(1)(a)), and legal obligations for invoices (art. 6(1)(c)). Client data is never used to train AI models.
This website
This site uses no cookies and no advertising trackers. It counts visits with Cloudflare Web Analytics, which records pages viewed and rough location without cookies and without following you across other sites. The host also keeps standard technical logs, such as IP addresses, for security.
Who else handles the data
| Service | What for |
|---|---|
| Google Workspace | Email, booking calls and video calls (Google Meet) |
| Instantly | Sending outreach emails |
| Fathom | Recording and transcribing calls, with consent |
| Stripe | Payments |
| Cloudflare | Hosting this website and counting visits |
Some of these are in the United States. Transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. I don't sell or share personal data with anyone else.
Your rights
You can ask to see, correct, delete or export your data, to restrict how I use it, or object to it being used, including for outreach. Email me and I'll answer within 30 days. You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (cnpd.pt).
Changes
If this policy changes, the date at the top changes too.