Privacy Policy

Last updated: 15 September 2026

1. Who we are

Love Business Systems is operated by Matt Love and is based in the Algarve, Portugal. This policy explains how we collect, use, store and share personal information through:

  • https://mattlove.business;
  • our contact and newsletter forms;
  • our client portal at [insert SuiteDash subdomain]; and
  • the services and communications we provide to clients.

Love Business Systems is the data controller for the personal information described in this policy.

Privacy enquiries can be sent to security@algarve.business or through the contact form on our website. Our postal contact address is Lote 13 Urbanizacao Lematur, 8650-190, Praia da Salema, Vila do Bispo, Portugal.

2. Information we collect

Website enquiries

When you contact us, we may collect your name, email address, telephone number, business name, preferred contact method, the service you wish to discuss and the information in your message. We also receive basic technical and security information, such as an IP address, browser information and submission time, to deliver the form and prevent abuse.

Newsletter subscribers

When you subscribe to our newsletter, we collect your email address, name if supplied, consent record and subscription preferences. Our newsletter service may also record delivery, opening and link-click information so we can understand whether our emails are useful. You can unsubscribe using the link in every marketing email.

Website usage information

With your permission, Google Analytics may collect information about how the website is used. This can include visited pages, approximate location, referral source, device and browser information, interactions and cookie or similar identifiers. We use this information in aggregated reports to improve the website and understand which content is useful.

Google Search Console provides reports about how the website appears and performs in Google Search. Connecting Search Console does not by itself place an additional tracking cookie on your device.

Client portal and client services

If you become a client, we may collect and process information needed to provide and administer the agreed service. This may include contact and business details, account records, messages, project information, forms, files, tasks, contracts, invoices, payment records and support history.

Our client area is provided through SuiteDash and is available on a Love Business Systems subdomain. SuiteDash processes portal information on our behalf. Portal users should also review SuiteDash's privacy policy.

Where it forms part of an agreed service, we may use AI tools, including services provided by OpenAI, to help organise information, research, draft material or support defined workflows. We will limit the information supplied to what is reasonably needed for the agreed work and apply the relevant account privacy and data controls. OpenAI's privacy information is available at openai.com/policies/privacy-policy.

Direct communications

If you communicate with us by email, telephone, video call or WhatsApp, we process the contact details and message content needed to respond and maintain the relationship. When you choose WhatsApp, information is also processed by WhatsApp under its EEA privacy policy.

3. Why we use your information

We use personal information to:

  • respond to questions and requests;
  • arrange discovery calls and prepare proposals;
  • provide, manage and support contracted services;
  • operate client accounts and project workspaces;
  • send newsletters when you have chosen to subscribe;
  • understand and improve our website when analytics consent has been given;
  • protect our website, forms, accounts and services from spam, fraud and misuse;
  • maintain appropriate business, accounting and legal records; and
  • establish, exercise or defend legal claims where necessary.

Our legal bases are your consent, taking steps at your request before entering a contract, performing a contract, complying with legal obligations and our legitimate interests in communicating with prospective clients, running the business securely and improving our services. Where we rely on legitimate interests, we consider your rights and reasonable expectations.

4. Cookies and similar technologies

The website uses essential technologies needed for security, forms, login functions, preferences and reliable delivery. Google reCAPTCHA is used to protect forms from spam and abuse and may set the _GRECAPTCHA security cookie when it is executed.

Analytics cookies are optional. Google Analytics will only be allowed to use analytics storage after you make that choice through the cookie banner. You can reject optional cookies and change your choice later through the Cookie Settings link.

Some embedded services or newsletter forms may place their own cookies or make requests to an external provider. These services will be identified and, where required, held back until the appropriate permission has been given.

A detailed list of active cookies, providers, purposes and durations will be available through the cookie banner or a separate Cookie Policy.

5. Services that process information for us

We use selected providers to operate the website and deliver our services. Depending on how you interact with us, these may include:

  • our website and email hosting providers;
  • Google Workspace for business email, documents, calendars, meetings and communication;
  • Google Analytics for consented website measurement;
  • Google reCAPTCHA for form security and spam prevention;
  • MailerLite for newsletter subscriptions and email campaigns;
  • SuiteDash for the client portal, client records and project administration;
  • OpenAI or other agreed AI providers when they are used to deliver a client service;
  • WhatsApp when you choose it as a communication method;
  • LiteSpeed Cache and, if enabled, QUIC.cloud for website performance and caching;
  • EWWW Image Optimizer if its external optimisation or CDN services are enabled; and
  • professional advisers, accounting providers, payment providers or public authorities when reasonably necessary or legally required.

MailerLite acts as a processor for subscriber data. Its privacy policy and data processing agreement explain its safeguards and subprocessors.

We do not sell personal information.

6. International processing

Some providers or their subprocessors may process information outside Portugal or the European Economic Area. Where this happens, we use providers that offer an applicable legal transfer mechanism, such as an adequacy decision, the EU Standard Contractual Clauses or another recognised safeguard. Further information can be requested using the contact details above.

7. How long we keep information

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected:

  • enquiry records are normally kept for up to 24 months after the last meaningful contact;
  • client and project records are kept for the duration of the relationship and afterwards where required for accounting, tax, contractual, dispute-resolution or legal purposes;
  • newsletter information is kept until you unsubscribe or we close the mailing list, with a minimal suppression record retained where needed to respect your choice;
  • analytics information is retained according to the period configured in Google Analytics, currently [confirm retention setting];
  • security and technical logs are retained for the limited periods set by our hosting and security providers; and
  • backups may temporarily retain deleted information until the relevant backup cycle expires.

We may retain information for longer when required by law or necessary to establish, exercise or defend a legal claim.

8. Your rights

Subject to the circumstances and applicable law, you may ask us to:

  • give you access to your personal information;
  • correct inaccurate or incomplete information;
  • delete information;
  • restrict or object to processing;
  • provide information in a portable format; or
  • withdraw consent where processing is based on consent.

Withdrawing consent does not affect processing that was lawful before it was withdrawn. You also have the right to complain to Portugal's data protection authority, the Comissao Nacional de Protecao de Dados.

We may need to confirm your identity before completing a rights request.

9. Security

We use reasonable technical and organisational measures to protect personal information. No online service can guarantee absolute security, so please avoid sending unnecessary sensitive information through general contact forms or ordinary email.

10. External links and embedded content

Our website may link to or display content from other websites. Those providers may receive technical information when their content is loaded and process information under their own policies. Where an embedded service requires optional cookies, it should be held back until the appropriate cookie choice has been made.

11. Changes to this policy

We may update this policy when our services, providers or legal obligations change. The latest version and revision date will be published on this page.

12. Contact

For questions or requests concerning personal information, contact:

Love Business Systems
Matt Love
Email: security@algarve.business
Address: Lote 13 Urbanizacao Lematur, 8650-190, Praia da Salema, Vila do Bispo, Portugal