Privacy Policy

Who We Are

Purple Honey is the trade name of Margarida Cercio, a sole trader registered in Portugal under tax number 257783229, at Estrada de Moscavide 12, 6.º F, 1800-278 Lisboa, Portugal. We are the controller of the personal data described here, which means we are the ones who decide what is collected and why, and the ones you hold responsible for it.

You can reach us about anything on this page at info@purplehoney.systems.

Overview

This policy explains how we collect, use, and protect your personal information when you visit our website or use our services. It describes what the site actually does, not what a template says it might.

Information We Collect

We collect information you provide directly via our contact form or newsletter signup: name, email, company name, message content and, on the contact form, your stated area of interest and revenue range.

The newsletter box on the contact form is unticked by default. We add you to the list only if you tick it yourself, or if you use one of the signup forms.

With your consent, we collect basic analytics (pages visited, device type, approximate location) via Google Analytics 4 to improve our site. See the Cookies & Analytics section below.

How We Use It, and Why We Are Allowed To

Every use below names the legal basis the GDPR requires us to have for it.

• Answering you. We read your message and reply. Basis: steps taken at your request before entering a contract, Article 6(1)(b).
• Getting the message to us. The form emails our own inbox and posts to our private Slack workspace so we see it quickly. This is an internal notification: it is not marketing and it goes no further than our team. Basis: the same, and our legitimate interest in running the business, Article 6(1)(f).
• The automatic acknowledgement you get by email after submitting the form. Basis: the same as above.
• The newsletter. Basis: your consent, Article 6(1)(a). We ask for it twice: after you sign up, you get an email asking you to confirm, and you join the list only once you click it. You can withdraw your consent at any time from the link in any email.
• Analytics. Basis: your consent, given in the cookie banner. Nothing loads before you accept.
• Booking a call. The calendar takes your name, email and chosen time. Basis: steps taken at your request before a contract, Article 6(1)(b).
• Working with you as a client. Basis: performance of the contract, Article 6(1)(b). For invoices and accounting records, our legal obligation, Article 6(1)(c).

We do not sell your data. We do not share it for anyone else's marketing. No decision about you is made automatically, and we do not profile you.

How Long We Keep It

• Contact form enquiries, in our inbox and in Slack: 24 months after our last contact with you, then deleted.
• Newsletter: until you unsubscribe. After that we keep the record that you unsubscribed, so that we do not email you again by mistake.
• Client records: for as long as we work together. Invoices and accounting records are kept for 10 years, which Portuguese tax law requires of us.
• Analytics: up to 14 months at user level in Google Analytics. The cookies themselves can last up to 2 years, and you can clear them whenever you want.

Who Else Handles Your Data

We do not run all of this ourselves. These are the services that process your data on our behalf, and they are the only ones:

• MailerLite, the newsletter list. Lithuania, European Union.
• Slack, the internal notification when you submit the form. United States.
• Google Analytics, site analytics, only if you accept. United States.
• Calendly, the booking calendar on the Contact page. United States.
• Namecheap, which hosts this website and our mailbox, and therefore carries the emails the form sends. United States.

Where a provider is outside the European Union, the transfer relies on the safeguards in that provider's own terms, normally the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

Security

The forms are rate limited against abuse, and the keys to every service above stay on the server, never in the page you are reading. Email leaves over an encrypted connection. No system is beyond reach, and if something happens to your data we will tell you and the supervisory authority within the deadlines the GDPR sets.

Cookies & Analytics

We use essential cookies for basic site functionality. With your consent, we also use Google Analytics 4 (GA4) to understand how visitors use our site (pages visited, approximate location, device type). GA4 sets cookies that may persist for up to 2 years and may share data with Google per Google's privacy policy.

On your first visit, you'll see a cookie banner where you can accept or decline analytics cookies. We do not load Google Analytics until you accept. You can change your choice at any time via the "Cookie Preferences" link in the footer.

The booking calendar on our Contact page is provided by Calendly and loads whenever that page is visited, since it is needed to deliver the booking feature you're requesting there; it is not gated behind the analytics cookie choice above. Calendly may set its own cookies; see Calendly's privacy policy for details.

Your Rights (GDPR)

You can ask us for a copy of your data, correct it, delete it, take it elsewhere in a portable format, restrict what we do with it, or object to any processing we base on legitimate interest. Where we rely on your consent, the newsletter and analytics, you can withdraw it at any time, and withdrawing it does not undo what was lawful before.

Ask at info@purplehoney.systems. We answer within one month.

If you believe we mishandled your data, you also have the right to complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (cnpd.pt).

Changes to This Policy

If we change how any of this works, we change this page and the date at the top of it.

Contact

Questions about this privacy policy? Email us at info@purplehoney.systems.