Privacy
Last updated 19 October 2026
This policy explains what personal data I collect, why, and what you can do about it. I'm based in Portugal, so the EU General Data Protection Regulation (GDPR) applies to everything I do, including work for US companies.
Who is responsible
Simão Marques, sole proprietor, Portugal. Contact for anything privacy-related: simao@simaomarques.com.
If I emailed you
I contact freight brokerages by email about my services. For that I use your name, your business email address, your company's name, website and phone number, and public facts about the company, such as its size, the software it uses and its job ads.
- Where it came from: your company's filing with the US Federal Motor Carrier Safety Administration (FMCSA), or your company's own website. Company size comes from public US government records. I never guess addresses. Before emailing, I check the address can receive mail, using software on my own server.
- Why I may use it: legitimate interest in offering a business service to a business, at a published business address (GDPR art. 6(1)(f)).
- To stop it: reply to any email and say so. I add your address to a block list the same day, and you won't hear from me again. I keep only the address on that block list, so the opt-out keeps working.
- How long: your details stay in my sending tool while the emails are running. I keep them in my own lead list for up to 24 months after the last email, then delete them.
If we talk or work together
- Booking details. When you book a call, Google Calendar collects your name, email and the answers you give (company, loads a month, TMS), so I can prepare for the call.
- Emails and notes from our conversations, to answer you and do the work.
- Call recordings and transcripts. Only if you say yes at the start of the call. They're used to write your breakdown accurately and deleted 90 days after the call, unless you become a client.
- Client documents such as rate confirmations, used only to build and run your system, under our agreement.
- Payment and invoicing details, kept as long as Portuguese tax law requires (10 years for invoices).
The legal basis is taking steps toward, or performing, a contract with your company (art. 6(1)(b)), and legal obligations for invoices (art. 6(1)(c)). Client data is never used to train AI models.
This website
This site uses no cookies and no advertising trackers. It counts visits with Cloudflare Web Analytics, which records pages viewed and rough location without cookies and without following you across other sites. The host also keeps standard technical logs, such as IP addresses, for security.
Who else handles the data
| Service | What for |
|---|---|
| Google Workspace | Email and booking calls |
| Instantly | Sending outreach emails |
| Fathom | Recording and transcribing calls, with consent |
| Stripe | Payments |
| Cloudflare | Hosting this website and counting visits |
Some of these are in the United States. Transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. I don't sell or share personal data with anyone else.
Your rights
You can ask to see, correct, delete or export your data, to restrict how I use it, or object to it being used, including for outreach. Email me and I'll answer within 30 days. You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (cnpd.pt).
Changes
If this policy changes, the date at the top changes too.