Privacy, data and cookies. Explained plainly.

Last updated: 4 August 2026

This Privacy, Data and Cookie Policy explains how personal data is handled through intelitive.com and its project-enquiry facilities.

It applies to the Intelitive Research Lab corporate and portfolio website. Individual ventures, client engagements, pilots and deployed products may have separate privacy notices, contractual terms and controller arrangements.

Who we are

For the website processing described in this notice, the controller is:

Behnam Dehghani
Founder and operator of Intelitive Research Lab
Portugal

• Website: intelitive.com
• Privacy and business enquiries: bd@intelitive.com
• Telephone: +351 932 297 030

Where a project-specific agreement or privacy notice identifies another controller, that document will govern the relevant processing.

Intelitive Research Lab develops applied-research ventures, AI-enabled products, private intelligence systems, automation, decision-support tools, cybersecurity concepts and robotic solutions. This website presents that portfolio and provides a way to begin a business conversation.

What personal data we collect and why we collect it

The information processed depends on how you use the website.

Website access and security

When you visit the website, the server and supporting infrastructure may process:

• IP address;
• date and time of the request;
• requested page or resource;
• referring page, where supplied by your browser;
• browser, device and operating-system information;
• response status and diagnostic information;
• activity indicating errors, misuse or attempted interference.

This information is used to deliver the website, maintain availability, diagnose faults and protect the website and its visitors.

The lawful basis is Intelitive’s legitimate interest in operating a reliable and secure corporate website under Article 6(1)(f) of the General Data Protection Regulation.

Project and business enquiries

When you submit a project-enquiry form, Intelitive collects:

• your name;
• your work email address;
• your message;
• your organization, if supplied;
• your telephone number, if supplied;
• the project or capability selected;
• the project page from which the enquiry was submitted;
• submission time;
• a randomly generated request reference.

This information is used to:

• understand and respond to your enquiry;
• assess a possible pilot, partnership, licence or commercial engagement;
• arrange follow-up communication;
• prepare requested steps before a possible contract;
• preserve necessary business correspondence;
• protect the enquiry channel against misuse.

Where you are contacting Intelitive about a possible contract involving you personally, processing may be necessary to take steps at your request before entering into a contract under Article 6(1)(b) GDPR.

Where you contact Intelitive on behalf of a company or another organization, processing is normally based on Intelitive’s legitimate interest in managing relevant business communications under Article 6(1)(f) GDPR.

Submitting an enquiry does not subscribe you to marketing communications. The privacy acknowledgement displayed with the form confirms that this notice was made available; it is not consent to unrelated marketing.

Form security and abuse prevention

The website creates short-lived security information to validate submissions, detect repeated requests and limit automated misuse. This may include request timestamps and identifiers derived from connection or submitted information.

These controls are used only to protect the form and website. They are not used to create advertising profiles or evaluate visitors commercially.

Business and legal records

If an enquiry develops into a project, pilot, partnership or other commercial relationship, Intelitive may retain relevant correspondence and records to:

• deliver the agreed work;
• manage the relationship;
• comply with accounting, tax or other legal obligations;
• establish, exercise or defend legal claims.

The applicable basis may be contractual necessity, compliance with a legal obligation, or legitimate interests, depending on the record and relationship.

Sensitive information

The public enquiry form is not designed to collect special-category or highly sensitive personal data.

Please do not submit:

• medical or clinical information;
• detailed legal-case material;
• financial-account or payment credentials;
• passwords, private keys or access tokens;
• identity-document copies;
• confidential client data;
• trade secrets or protected technical information.

Where sensitive information is received unintentionally, Intelitive will seek to minimize or remove it unless there is a lawful reason and an appropriate protected channel for retaining it.

Comments

Comments are collected only if comments are enabled on a WordPress post or page.

When a visitor submits a comment, WordPress may collect:

• the comment;
• the supplied name;
• the supplied email address;
• an optional website address;
• IP address;
• browser user-agent information.

An approved comment, display name and supplied website address may become public. The email address is not displayed publicly by WordPress.

The Intelitive theme does not request a remote avatar for commenters. If an anti-spam or moderation service is added to the live website, its processing must be disclosed in this notice.

Visitors may optionally allow WordPress to remember their comment details through convenience cookies.

Media

Public visitors cannot upload files through the Intelitive project-enquiry forms. The forms accept text only.

Authorized WordPress editors may upload images and other media for publication. Published media is normally publicly accessible and may retain embedded metadata.

Editors should remove location information, device details and confidential metadata before publishing files.

Contact forms

Project-enquiry forms send a plain-text email to Intelitive’s configured business mailbox.

The email address entered by the visitor is used as the reply address so Intelitive can respond directly.

The Intelitive theme does not create a WordPress database record containing the enquiry message. The submitted information nevertheless remains in the receiving mailboxes and may pass through the website’s hosting and mail-delivery infrastructure.

Enquiry data is not used by Intelitive for:

• advertising profiling;
• sale to data brokers;
• unrelated mailing lists;
• training general-purpose AI models;
• solely automated decisions about the sender.

Email is not an appropriate channel for highly sensitive or secret information. A protected communication route should be agreed before such information is exchanged.

Cookies

The public Intelitive portfolio experience does not intentionally use analytics, advertising, behavioural-profiling or form-session cookies. It does not use browser local storage or session storage for project enquiries.

WordPress may use the following cookies in particular circumstances:

Password-protected content

A cookie beginning with wp-postpass_ may be used when a visitor enters the password for protected content. Its usual WordPress lifetime is approximately ten days.

Comment convenience cookies

If comments are enabled and a visitor chooses to save their details, WordPress may set cookies beginning with:

• comment_author_;
• comment_author_email_;
• comment_author_url_.

These convenience cookies normally last for approximately one year.

Authorized-user cookies

For authorized administrators and editors, WordPress may use:

• wordpress_test_cookie, to check whether cookies are supported;
• wordpress_[hash], for authentication;
• wordpress_logged_in_[hash], to maintain a signed-in session;
• wp-settings-* and wp-settings-time-*, for interface preferences;
• wp_lang, for a selected administration language where applicable.

These cookies support administration, security and requested user preferences. They are not used to advertise to public visitors. Further information is available in the official WordPress cookie documentation.

You can remove or block cookies through your browser settings. Blocking necessary WordPress cookies may prevent protected content, comments or administration functions from working correctly.

If Intelitive later introduces analytics, advertising, embedded-media tracking or other non-essential technologies, this notice and the website’s consent controls will be updated before those technologies are activated. Portuguese cookie requirements are governed in part by Law 41/2004.

Analytics

Intelitive’s public portfolio theme does not include a visitor-analytics service.

The website’s hosting and security environment may create limited server logs or aggregate operational statistics for availability, diagnostics and abuse prevention. These records are not used by Intelitive to build advertising profiles.

If an analytics provider is introduced later, Intelitive will disclose:

• the provider;
• the data collected;
• the purpose and lawful basis;
• any cookies or device storage used;
• the retention period;
• international transfers;
• the available consent and withdrawal controls.

Who we share your data with

Intelitive does not sell or rent personal data.

Personal data may be disclosed only where necessary to:

• Behnam Dehghani and people authorized to support Intelitive’s business;
• the provider hosting the WordPress website;
• the provider operating the bd@intelitive.com mailbox;
• the mail-delivery infrastructure used by WordPress;
• Google, because a copy of each project enquiry is delivered to the specified Gmail address;
• security, backup or technical-support providers used for the live service;
• professional advisers subject to appropriate confidentiality obligations;
• courts, regulators, law-enforcement bodies or public authorities where disclosure is legally required;
• a successor organization in connection with a genuine restructuring, investment or transfer, subject to appropriate confidentiality and data-protection measures.

Google’s handling of information is also governed by the applicable Google service terms and Google Privacy Policy.

Each provider should receive only the information reasonably necessary for its role.

How long we retain your data

Intelitive retains personal data only for as long as it is needed for the purpose for which it was collected, taking account of legal obligations and the need to establish, exercise or defend claims.

The following technical periods apply to the Intelitive enquiry form:

• duplicate-submission markers are designed to expire after approximately 10 minutes;
• short rate-limit counters are designed to expire after approximately 15 minutes;
• daily abuse-prevention counters are designed to expire within 24 hours;
• form-security tokens are valid for no more than approximately 12 hours.

The theme does not retain the enquiry body as a WordPress database record.

Email correspondence is retained while an enquiry is being considered and for an appropriate follow-up period. If a commercial relationship is established, relevant records may be retained for the duration of that relationship and for any subsequent period required by contractual, accounting, tax or legal-claims obligations.

Comments may remain for as long as the related content remains published, unless a valid removal request or another retention obligation applies.

Authorized WordPress account information is retained until access is removed or the account is no longer required, subject to necessary audit and security records.

Server logs, mail logs and backups follow the documented rotation and deletion schedules of the live providers. These schedules must be reflected accurately in the deployed version of this notice.

What rights you have over your data

Subject to the conditions and exceptions established by law, you may have the right to:

• request access to your personal data;
• correct inaccurate or incomplete information;
• request erasure;
• request restriction of processing;
• receive eligible data in a portable format;
• object to processing based on legitimate interests;
• withdraw consent where consent is the lawful basis;
• request information about safeguards used for international transfers;
• lodge a complaint with a supervisory authority.

Consent withdrawal does not affect the lawfulness of processing completed before withdrawal. Erasure, portability and objection rights are not absolute and depend on the circumstances and lawful basis.

To exercise your rights, email bd@intelitive.com. Please describe your request clearly. Intelitive may request proportionate information to verify your identity and protect personal data from unauthorized disclosure.

Requests are normally answered within one month. Where legally permitted because of complexity or the number of requests, this period may be extended by up to two additional months, with an explanation.

In Portugal, complaints may be submitted to the Comissão Nacional de Proteção de Dados — CNPD:

• CNPD data-subject rights
• Submit a complaint to the CNPD

Where your data is sent

Website, email, security or support providers may process information in Portugal, elsewhere in the European Economic Area, or in another jurisdiction.

A copy of every project enquiry is delivered to a Gmail address. Google may operate infrastructure in multiple countries.

Where personal data is transferred outside the European Economic Area and the destination is not covered by an applicable adequacy decision, Intelitive will use an appropriate mechanism under Chapter V GDPR, such as the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where required.

Information about a transfer affecting your data and the safeguards used may be requested through bd@intelitive.com.

The contractual providers, processing countries and safeguards applicable to the live installation must be verified before this notice is published. Current European transfer mechanisms are described by the European Commission.

Contact information

For questions, rights requests or concerns about the use of personal data on this website, contact:

Intelitive Research Lab — Privacy Contact

• Email: bd@intelitive.com
• Telephone: +351 932 297 030
• Website: intelitive.com

A request relating to a particular project should name that project and, where available, include the enquiry reference.

Additional information

How we protect your data

Intelitive uses proportionate organizational and technical measures intended to protect website information against unauthorized access, alteration, loss, misuse and disclosure.

The website includes measures such as:

• encrypted HTTPS connections;
• controlled submission validation;
• signed form and request-integrity controls;
• same-origin and anti-forgery protections;
• automated-submission detection;
• short-lived abuse-prevention limits;
• data minimization;
• restricted error logging;
• controlled access to WordPress administration and business communications.

No internet or email system can guarantee absolute security. Visitors should not send passwords, credentials, confidential datasets, unpublished inventions or other highly sensitive information through a public enquiry form.

What data-breach procedures we have in place

A suspected personal-data breach should be:

1. identified and contained;
2. documented and assessed;
3. investigated with relevant service providers;
4. evaluated for possible consequences to affected people;
5. remedied to reduce further risk;
6. reported to the appropriate authority or affected people when legally required.

Where a personal-data breach is likely to create a risk to individuals, Intelitive will notify the CNPD without undue delay and, where feasible, within 72 hours after becoming aware of it. Where a breach is likely to create a high risk, affected individuals will be informed without undue delay when required by law.

Further guidance is available from the CNPD on personal-data breaches.

Suspected privacy or security incidents affecting this website may be reported to bd@intelitive.com.

What third parties we receive data from

Intelitive does not purchase visitor profiles from advertisers or data brokers for this website.

Most information is:

• supplied directly by the visitor;
• generated when the visitor’s browser connects to the website;
• created during correspondence with Intelitive.

Intelitive may occasionally receive a business introduction or contact information from a client, professional contact or prospective partner. Where required, the person concerned will be told the source and provided with the information required by Article 14 GDPR.

If you provide another person’s information through an enquiry, you should have an appropriate reason and authority to do so.

What automated decision-making or profiling we do

Intelitive does not use website visitor data to make solely automated decisions that produce legal or similarly significant effects.

The website may automatically validate a form, identify incomplete or invalid input, and temporarily reject duplicate or unusually frequent submissions. These actions protect the communication channel and do not evaluate a person’s suitability for a project, service, employment, credit or other consequential opportunity.

A person who believes a legitimate submission was incorrectly blocked can contact Intelitive directly by email or telephone.

Website enquiries are not used to train general-purpose AI models or create advertising profiles.

Industry regulatory disclosure requirements

The Intelitive website is a corporate portfolio and business-contact service. It does not itself provide:

• clinical diagnosis or medical treatment;
• individualized legal advice;
• credit or investment decisions;
• automated recruitment decisions;
• emergency, safety-critical or public-authority services.

Descriptions of legal, healthcare, financial, cybersecurity, recruitment and robotic ventures are commercial portfolio information. They do not transfer visitor data into those products merely because a portfolio page is viewed.

A deployed venture, client engagement or regulated use case may require its own controller arrangements, privacy notice, contractual terms, risk assessment and sector-specific safeguards.

External websites

The website contains links to external services and publications, including JURIXA, ORCID, DOI resources, GitHub and Unsplash.

Following an external link causes your browser to communicate with that external service. Its own privacy and cookie policies then apply.

Portfolio images are served from Intelitive’s website rather than fetched from Unsplash during an ordinary page view. An Unsplash attribution link, where present, only connects to Unsplash when selected.

Intelitive is not responsible for the privacy practices or availability of independent external websites.

Changes to this notice

This notice may be updated when:

• the website or enquiry process changes;
• a new provider, plugin, cookie or analytics service is introduced;
• Intelitive’s projects or organizational arrangements change;
• legal or regulatory requirements change.

The current version will be published on this page with an updated revision date. Material changes will be highlighted where reasonably appropriate.

This notice should be reviewed whenever the WordPress installation, hosting arrangement, mail-delivery configuration, plugins, analytics tools or project-contact process changes.