Last updated: 12 October 2026

Your privacy matters to me. This Privacy Policy explains how personal information is collected, used, stored and protected when you visit or interact with my website, ruifeio.com.

I aim to handle personal information responsibly, transparently and in accordance with applicable data protection legislation.

Who I Am

This website is operated by Rui Miguel Feio and is intended to share articles, knowledge, experiences and personal perspectives on technology, cybersecurity, leadership and other subjects of interest.

I am the data controller for personal information processed through this website where I determine the purposes and means of that processing.

For privacy-related questions, enquiries or requests concerning your personal information, please use my contact page.

Information Collected

Depending on how you interact with this website, the following information may be collected:

  • Contact forms: Your name, email address, optional company name, subject and message.
  • Comments: Your name, email address, comment and any other information you voluntarily provide, together with your IP address and browser user-agent information used for moderation and spam prevention.
  • Technical information: IP addresses, browser details, access times, requested pages and other technical information that may be recorded by the website’s hosting or security systems.
  • Cookies and similar technologies: Information stored in or accessed from your browser to support website functionality, preferences, security and any additional services that are enabled.

Visitors are not required to register an account, log in or upload media to access and use this website.

Providing information through the contact form or comments section is voluntary. However, information marked as required is necessary to submit the relevant form.

How Your Information Is Used

Personal information is processed for the following purposes:

  • Responding to enquiries and messages submitted through the website.
  • Managing comments, supporting discussions and preventing spam or abuse.
  • Maintaining the security, functionality, availability and reliability of the website.
  • Investigating technical problems or suspected misuse.
  • Complying with applicable legal obligations.

The lawful bases for processing personal information under applicable data protection legislation are:

  • Legitimate interests: Responding to enquiries, moderating comments, preventing abuse and maintaining the security and operation of the website, where these interests are not overridden by your rights and freedoms.
  • Legal obligations: Processing information where necessary to comply with applicable legal requirements.
  • Consent: Processing that requires your permission, including the use of non-essential cookies or similar technologies where applicable.

Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Comments and Gravatar

When you leave a comment, the information entered in the comment form, together with your IP address and browser user-agent information, may be collected to support moderation and spam detection.

When a comment is approved, the comment and the name you provide may become publicly visible on the website. Your email address will not be displayed publicly.

Please avoid including personal, sensitive or confidential information in comments that you do not wish to make public.

If Gravatar integration is enabled, a hash generated from your email address may be sent to the Gravatar service to determine whether you have a profile image. Once your comment is approved, that image may be displayed publicly alongside your comment.

Further information about Gravatar’s handling of personal information is available in the Automattic Privacy Policy.

Comments and associated information may be retained to preserve discussions, support moderation and recognise previously approved contributors, subject to applicable data protection rights.

Cookies and Similar Technologies

This website may use cookies and similar technologies to support its functionality, security and visitor experience.

Comment Cookies

If you leave a comment, you may choose to save your name, email address and website in cookies so that you do not need to enter them again when submitting another comment.

These cookies normally remain active for one year.

Essential Cookies

Cookies or similar technologies may be used where necessary for the operation, security and functionality of the website.

Third-Party Cookies

Third-party services, including embedded content, analytics or security tools, may use cookies or similar technologies where enabled.

Where required by applicable law, non-essential cookies and similar technologies will only be used after appropriate consent has been obtained.

You can manage or delete cookies through your browser settings. Disabling certain cookies may affect some website functionality.

Where a cookie consent mechanism is provided, you may use it to manage your preferences.

Embedded Content and External Websites

Articles may include embedded content, such as videos, images, articles or other resources hosted by third parties.

Embedded content may behave as though you had visited the external website directly. These providers may collect information about you, use cookies or similar technologies, and monitor your interactions according to their own privacy policies.

This website may also contain links to external websites and third-party resources.

Although I aim to reference reputable sources, I do not control their privacy practices, content or subsequent changes.

I encourage you to review the privacy policies of external websites before providing personal information.

Who May Receive Your Information

Personal information may be processed by third-party service providers involved in operating, maintaining and securing this website.

Depending on the services enabled, these may include:

  • Website hosting and infrastructure providers.
  • Email delivery and contact-form services.
  • Website security and spam prevention services.
  • Providers of embedded content or analytics services.

These providers may process information in accordance with their respective roles, contractual arrangements and applicable data protection obligations.

Personal information may also be disclosed where required by law or where reasonably necessary to establish, exercise or defend legal claims, investigate misuse or protect the website and its users.

I do not sell personal information collected through this website.

International Data Transfers

Some third-party service providers may process or store personal information outside the United Kingdom or European Economic Area.

Where such transfers take place and applicable data protection legislation requires additional safeguards, appropriate legal transfer mechanisms must be used.

These may include transfers to countries recognised as providing an adequate level of protection or the use of approved contractual safeguards, together with supplementary measures where required.

Further information about relevant service providers and applicable transfer safeguards may be requested through my contact page.

How Long Information Is Retained

Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected.

The applicable retention periods or criteria depend on the nature of the information:

  • Contact enquiries: Retained for as long as necessary to respond to the enquiry, manage relevant correspondence and address any associated legal or administrative requirements.
  • Comments: Approved comments and associated information may be retained while the relevant articles and discussions remain published, unless removal is appropriate or required under applicable law.
  • Security and technical logs: Retained according to operational security requirements, the nature of the information and the retention settings of the hosting or security services used.
  • Cookies: Retained for the period associated with their purpose, as described in this policy or in the relevant cookie information provided by the website.

Information may be retained for longer where required by law or where necessary to establish, exercise or defend legal claims.

When personal information is no longer required, it will be deleted or anonymised where reasonably practicable and appropriate.

Your Data Protection Rights

Depending on the circumstances and applicable data protection legislation, you may have the right to:

  • Access: Request confirmation of whether your personal information is being processed and obtain a copy of that information.
  • Rectification: Request correction of inaccurate or incomplete personal information.
  • Erasure: Request deletion of your personal information where the applicable legal conditions are met.
  • Restriction: Request that the processing of your personal information be restricted in certain circumstances.
  • Objection: Object to processing based on legitimate interests where applicable.
  • Data portability: Request your personal information in a structured, commonly used and machine-readable format where the relevant legal conditions apply.
  • Withdrawal of consent: Withdraw consent at any time where processing relies on consent.

These rights are subject to applicable legal conditions and exceptions.

To exercise your rights, please contact me.

I will respond to requests within the time limits required by applicable data protection legislation, normally within one month, subject to any lawful extensions.

You also have the right to raise a complaint with the relevant data protection authority.

In the United Kingdom, this is the Information Commissioner’s Office (ICO). Where applicable, you may also contact another competent supervisory authority.

Security

I take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.

These measures are intended to support the confidentiality, integrity and availability of information processed through the website.

However, no website, internet transmission or electronic storage system can guarantee absolute security.

Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to the website, its functionality, the services used or applicable legal requirements.

Any updates will be published on this page, together with the date of the latest revision.

Where required by law, additional notice or consent will be provided for material changes to how personal information is processed.

Contact

If you have questions about this Privacy Policy, how your personal information is handled or your data protection rights, please contact me.

I welcome reasonable questions and requests concerning the privacy and security of information processed through this website.