Privacy
Privacy policy
Last updated 17 July 2026
This policy explains what personal data PorqueNo Digital collects, why we collect it, and the rights you have over it. Corisande Ltd, trading as PorqueNo, is the data controller. We never sell or trade your personal data.
What data we collect
We only collect data you choose to give us, or that we need to run the site:
- Contact enquiries: your name, email address, the topic you pick and the message you send through our contact form.
- Newsletter: your email address, when you subscribe.
- Email correspondence: anything you send us directly, and our replies.
- Service engagements: the information needed to deliver work to clients we are engaged by.
- Technical data: the standard server logs and cookieless, aggregated usage measurements described below.
Lawful bases for processing
Under UK GDPR we rely on the following lawful bases:
- Legitimate interests
- Responding to enquiries you send us, keeping records of our business dealings, and understanding, in aggregate, how this site is used.
- Consent
- Sending you our newsletter, where you have asked to receive it. You can withdraw consent at any time.
- Contract
- Delivering work and services to clients we are engaged by, and the communication that goes with it.
- Legal obligation
- Meeting our accounting, tax and other statutory record-keeping duties.
How we use your data
We use the data above to:
- reply to your enquiry and, where relevant, quote for or carry out work;
- send the newsletter to people who have asked for it;
- keep proper records of our business communications and obligations;
- understand, in aggregate, how the site is used so we can improve it.
We do not use your data for automated decision-making or profiling.
Who we share it with
We do not sell or trade your personal data. We share it only with the service providers (processors) that help us run PorqueNo, each bound by a data processing agreement to use it solely on our instructions:
- Resend
- Delivers the email generated when you submit the contact form or subscribe to the newsletter. Resend processes this data in the United States under a data processing agreement and the appropriate Standard Contractual Clauses; it is not held in full EU residency.
- iDrive e2
- Stores encrypted backups of form submissions in S3-compatible object storage, so an enquiry is never lost in transit.
- Our hosting provider
- Serves this website and processes the technical logs (such as IP address) that any web server necessarily handles to deliver a page.
- Umami (self-hosted)
- Our own analytics, running on infrastructure we control. It is cookieless and does not build a profile of you across sites, see “Cookies and analytics” below.
We may also disclose data where the law requires it, or to establish or defend legal claims.
How we keep it secure
Data is encrypted in transit (HTTPS) and our submission backups are encrypted at rest. Access is limited to the people who need it, and we keep our systems patched and up to date. No online service can promise perfect security, but we take reasonable and proportionate measures to protect your data and to detect and respond to any breach.
Cookies and analytics
We use Umami, a privacy-friendly analytics tool we host ourselves. It is cookieless and stores nothing on your device, so we show no cookie banner, there is nothing to consent to. It does not use your IP address to identify you or track you across other websites.
Because these measurements are anonymous and used purely to count visits and understand trends, we process them forstatistical purposes as recognised by the Data (Use and Access) Act 2025. We keep aggregate statistics for up to 12 months and routinely clear out the underlying raw events, retaining only the summarised figures.
Analytics are on. We count visits anonymously, without cookies.
How long we keep it
We keep contact-form submissions and business correspondence for up tosix years, in line with our accounting and legal record-keeping obligations, after which they are deleted. Newsletter subscriptions are kept until you unsubscribe. Aggregate analytics are kept for up to 12 months, as described above.
Your rights
Under UK GDPR you have the right to:
- Access: ask for a copy of the personal data we hold about you.
- Rectification: ask us to correct data that is wrong or incomplete.
- Erasure: ask us to delete your data, where we have no overriding reason to keep it.
- Restriction: ask us to pause our use of your data while a concern is resolved.
- Objection: object to processing we carry out on the basis of legitimate interests.
- Portability: receive the data you gave us in a portable, machine-readable form.
- Withdraw consent: for anything we do on the basis of your consent, such as the newsletter.
To exercise any of these, email us at[email protected]. We will respond within one month.
Information Commissioner’s Office
We are registered with the UK Information Commissioner’s Office (ICO) as a data controller under the Data Protection Act 2018 and UK GDPR. OurICO Registration Number is 00011717492, which you can verify on theICO public register.
If you are unhappy with how we have handled your data, you have the right to complain to the ICO atico.org.uk. We would appreciate the chance to put things right first, so please do contact us before you do.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the “last updated” date at the top of this page. This version is effective from 17 July 2026.
How to contact us
For any question about this policy or your personal data, email[email protected].
Company details
Corisande Ltd, trading as PorqueNo · London, UK