Summary

I respect the EU’s General Data Protection Regulations (GDPR) and this policy explains how I collect and treat any information you give me. You won’t find any complicated legal terms or long passages of unreadable text. I’ve no desire to trick you into agreeing to something you might later regret.

I handle all business through my company Suprasumo Ltd, registered in England and Wales with the company number 9137056 and VAT number 191196003.

Why I value your privacy

I value your privacy as much as I do mine, so I’m committed to keeping your personal and business information safe. I’m uncomfortable with the information companies, governments and other organisations keep on file, so I ask for only the bare minimum from my customers. I’ll never use your personal information for any reason other than why you gave it, and I’ll never give anyone access to it unless I’m forced to by law.

How I collect information

I ask for contact information on my website so that I can reply to your enquiry.

My website counts visits with Pulso, a small counter I wrote and host myself in the EU. It uses no cookies and stores no personal information: no IP addresses, no browser details, nothing that could identify you or follow you from one day to the next. It only keeps the page you visited, the site that sent you, a rough device type and a country guessed from your timezone. It also respects your browser’s "Do Not Track" and "Global Privacy Control" settings, so if either is on, nothing is counted at all. If you prefer, you can still stop counting your visits from this browser.

Occasionally, I might receive your contact information from one of my partners. If I do, I protect it in exactly the same way as if you give it to me directly.

What information I hold

When you contact me by email or through our website, I collect your name, email address, phone number, a social media username and the company you work for, if you’ve given me that.

If you sign up for my newsletter, I only collect your email address.

When you buy something from me, I collect your name, email address, phone number and a delivery address.

If you do business with me, I also collect your business name and keep records of the invoices I send you and the payments you make.

All purchases are processed by Stripe, my payment processing platform and I never have access to your credit card information.

Where I store your information

When you contact me by email or through my website, I store your information in my own custom Customer Relationship Management (CRM) app. If you sign up for my newsletter, I store your email address in MailChimp, which is the marketing platform I prefer. When you buy something from me, your information is stored in Stripe, my preferred payment processing platform, and if we do business, I store your information in my preferred accounting software, Crunch. I chose these systems partly for their commitment to security.

What I use your information for

Occasionally, I may use your contact information to send you details of my products and services. When I do, you have the option to unsubscribe from these communications and I won’t send them to you again. I will use your information to send you invoices, statements or reminders.

Who’s responsible for your information

Yours truly: João Pescada, the Technology Director at Suprasumo Ltd (my company) is responsible for the security of your information. You can contact me at joao@pescada.pt if you have any concerns about the information I store.

Who has access to your information

When I store information in my own systems, only I have access to it.

How I keep your information private

Where I store your information in third-party services, I restrict access only to people who need it. I store passwords in 1Password, an encrypted password manager, use a different randomly generated password for each service and never use the same password twice.

The computers we use are all encrypted using File Vault and are protected by a passcode or fingerprint access. These computers ask for authentication whenever they’re started or after 5 minutes of inactivity. Our mobile devices are also protected by a fingerprint or facial recognition.

How to complain

I take complaints very seriously. If you’ve any reason to complain about the ways I handle your privacy, please contact me by email at joao@pescada.pt.

Changes to the policy

If I change the contents of this policy, those changes will become effective the moment I publish them on this website.