This notice covers the personal data of people who visit this site, write to us, or book a call. It is written to be read, not scrolled past. Last updated 29 July 2026.
Who we are
Solven Advisory is an AI enablement and implementation consultancy based in Lisbon, Portugal. For anything in this notice, the controller you are dealing with is Solven Advisory, and the fastest route is miguelmonteiro@solvenadvisory.ai.
What we collect, and why
If you use the contact form, we receive the details you type: name, firm, email address, and your message. The form is delivered to our inbox by FormSubmit, a form-forwarding service; we use the details only to reply to you. If you book a call, scheduling runs on Cal.com's EU-hosted infrastructure, which collects the name, email address, and time slot you provide in order to place the meeting in both calendars. If you simply email or phone us, we hold the correspondence the way any firm holds its mail.
We run Vercel's cookieless analytics, which counts visits in aggregate, stores nothing on your device, and does not identify individuals. It runs whether or not you accept anything else. Video on the AI Flix page streams through YouTube's privacy-enhanced player, which stores nothing on your device until you choose to press play.
We would also like to understand how the site is actually read: which pages hold attention, where people stop, and which routes lead to a conversation. That requires cookies, so we ask before setting any. Nothing runs until you accept, declining takes a single click, and either choice is remembered. There is no advertising, no profiling for ad targeting, and no data sold or passed to brokers. There is no newsletter and no marketing list; when we say we reply to people, not leads, this notice is what that means in practice.
The legal basis
We process contact and booking details because you asked us to: steps taken at your request before a possible contract (Article 6(1)(b) of the GDPR). We keep ordinary business correspondence on the basis of legitimate interest (Article 6(1)(f)). Analytics cookies rest on consent alone (Article 6(1)(a), together with Article 5(3) of the ePrivacy Directive as enacted in Portugal by Lei 41/2004). Consent is the entire basis there: withdraw it and the processing stops.
Where the data sits
The site is hosted by Vercel. Form delivery passes through FormSubmit. Scheduling runs on Cal.com (EU infrastructure). Our email runs on Microsoft 365. If you accept analytics, PostHog processes that data on its EU cloud in Frankfurt, and Microsoft Clarity processes it under Microsoft's terms, which permit transfers outside the EU covered by the Standard Contractual Clauses. Each of these providers acts as a processor for the data described above; none of them is given your details for any purpose beyond delivering the service.
How long we keep it
Correspondence is kept for as long as a working relationship, or the reasonable prospect of one, exists, and afterwards only as long as ordinary business record-keeping requires. If you would like something deleted sooner, ask.
Your rights
You can ask for access to the data we hold about you, have it corrected or deleted, restrict or object to its processing, and receive a copy in a portable format. Write to miguelmonteiro@solvenadvisory.ai and we will deal with it directly. You also have the right to complain to the Portuguese supervisory authority, the CNPD, at cnpd.pt.