Privacy Policy

Who we are

This policy explains how Palagenix LLC (“Palagenix”, “we”, “us”) collects and uses personal data when you visit palagenix.com or contact us. We are the data controller, which means we decide why and how your data is used.

Privacy contact: privacy@palagenix.com

This policy covers the website, in English and in Portuguese. Work we do for clients is covered by our Terms and Conditions and the agreement for each project.

What we collect and why

We collect only what we need for the purposes below, and each one has a legal basis under Article 6 of the GDPR.

What we collectHow we get itWhat we use it forLegal basis
Name, organization, email, and messageYou send them through the contact formTo reply, prepare a quote, and start a project if you go aheadSteps before a contract (Art. 6(1)(b)), or our legitimate interest in answering business enquiries (Art. 6(1)(f))
IP address, browser and device type, pages visited, date and timeAutomatically when you visit, through server logs and cookiesTo keep the site running, fast, and secureLegitimate interests (Art. 6(1)(f))
Names, business contact details, and invoicesWhen you hire usTo do the work, invoice you, and meet tax and accounting rulesContract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c))
Analytics data collected by Google’s standard analytics tools, such as pages viewed, approximate location, and device and browser typeGoogle Analytics cookies, after you accept themTo see which pages people use and improve the siteYour consent (Art. 6(1)(a))

You do not have to give us any of this, but we cannot answer an enquiry without the details above. Please do not put sensitive information, such as health details, in your message. We do not make decisions about you by automated means.

Cookies

We use cookies that the site needs to work, and we set any other cookie only after you say yes.

  • Needed for the site: these remember things like your language choice and keep the site fast and secure. You cannot switch them off here, and they do not need your consent.
  • Optional: analytics (we use Google Analytics), marketing, or embedded third-party content. These are off until you accept them in the cookie banner.

You can change your mind at any time by using the cookie settings on the site, or by clearing cookies in your browser settings. Blocking needed cookies may break parts of the site.

Who we share it with

We do not sell your data. We share it only with the companies that help us run the site and the business, and each one handles it under a written agreement or the provider’s standard data processing terms:

  • Website hosting provider
  • Analytics: Google
  • Accountants, lawyers, and other advisers, when we need their help
  • Authorities, when the law requires it

Transfers outside the EEA

Some of these providers, and Palagenix LLC itself, are located outside the European Economic Area. When your data goes there, we rely on an EU adequacy decision or on the European Commission’s Standard Contractual Clauses to protect it. You can ask us for a copy of the safeguards using the contact details above.

How long we keep it

We keep personal data only as long as we need it for the reason we collected it, then delete it or make it anonymous.

DataHow long
Contact form enquiries24 months after our last message, unless you become a client
Client and billing recordsAs long as tax and accounting law requires
Server logs90 days
CookiesUntil they expire, as shown in the cookie settings

Your rights

Under the GDPR you can ask us to:

  • Give you a copy of the personal data we hold about you
  • Correct data that is wrong or incomplete
  • Delete your data
  • Limit how we use your data
  • Send your data to you or another company in a common format

You can also object to us using your data based on our legitimate interests, and you can withdraw your consent at any time, for example by changing your cookie settings. Withdrawing consent does not affect anything we did with your data before.

To use any of these rights, email privacy@palagenix.com. We reply within one month. If your request is complex, we may need up to two more months, and we will tell you why. We may ask you to confirm who you are first.

Complaints

If you think we have handled your data wrongly, please tell us first so we can fix it. You also have the right to complain to a data protection authority. You can go to the authority in the country where you live or work, or where you think the problem happened. For example, that is the Comissão Nacional de Proteção de Dados (CNPD) in Portugal and the Data Protection Commission in Ireland.

Security, children, links, and changes

We protect your data with measures such as encrypted connections (HTTPS), access limited to people who need it, and keeping our software up to date. No system is completely secure, so if a breach puts your rights at risk, we will tell you and the relevant authority as the law requires.

The site is for businesses and clubs, not for children, and we do not knowingly collect data from anyone under 16.

The site may link to other websites. We do not control them, and this policy does not cover them.

We may update this policy. The date at the top shows the latest version, and for major changes we will put a notice on the site.