Privacy Policy

Last updated: 9 July 2026

This policy explains what personal data Carnot ("we", "us") collects through this website, carnotconsulting.com, how we use it and what rights you have over it. We keep it deliberately short: we collect very little.

1. Who we are

Carnot is an IT company that builds and operates websites for industrial businesses, with offices in Dubai (UAE), Singapore and Lisbon (Portugal). For anything related to this policy you can reach us through the contact form on this website.

2. What data we collect

• Contact form. If you write to us, we receive the name, company, email address and message you choose to send. That's all the form collects.
• Technical logs. Our hosting provider (Cloudflare) processes standard connection data — IP address, browser type, pages requested — to serve the site and protect it from abuse.
• Anti-bot verification. The contact form is protected by Cloudflare Turnstile, which analyses technical browser signals to tell humans from bots. It does not show you puzzles and we never see this data ourselves.

This website does not use advertising trackers, does not run third-party analytics scripts and does not sell or rent personal data to anyone.

3. What we use it for

• To answer your enquiry — that is the only use we make of what you send through the form.
• To keep the website online, fast and secure.

4. Legal basis

We process contact-form data on the basis of your request prior to entering into a contract, and technical data on the basis of our legitimate interest in operating a secure website (Art. 6(1)(b) and 6(1)(f) GDPR, where applicable).

5. Who we share it with

Messages sent through the form are delivered to our mailbox through Cloudflare's infrastructure. We use no other processors for this website. We never share your data with third parties for their own purposes.

6. International transfers

Cloudflare operates a global network, so technical data may be processed outside your country. Cloudflare provides the safeguards required by EU law (standard contractual clauses).

7. Retention

We keep contact messages for as long as needed to handle the conversation and any business relationship that follows, and delete them when they no longer serve that purpose. Technical logs are retained by Cloudflare for short periods.

8. Your rights

You can ask us to access, correct, delete or export the data we hold about you, and to restrict or object to its processing. Just reach out through the contact form on this website. If you are in the EU you can also lodge a complaint with your data protection authority.

9. Changes

If we change this policy we will update this page and its date. We won't reduce your rights without telling you.