Candor & Coast's Privacy Policy

Privacy Policy for Candor & Coast

Last updated: May 2026

1. Who We Are

This website is operated by Candor & Coast Inc., a business registered in the United States. Our principal place of operations is Portugal.

For the purposes of the General Data Protection Regulation (GDPR), Candor & Coast Inc. is the data controller responsible for your personal data.

If you have any questions about this Privacy Policy or how we handle your data, you can contact us at:

Email: hello@candorandcoast.com

2. What Data We Collect and Why

Contact Form Submissions

When you complete the contact or application form on our website, we collect the personal information you provide, which may include your name, email address, business name, and any details you share about your business or enquiry.

We use this information to:

Respond to your enquiry
Assess whether our services are a good fit for your needs
Follow up on your application for the AI Readiness Review

Legal basis: Legitimate interest (responding to a direct enquiry from you) and, where applicable, steps taken prior to entering into a contract.

Website Analytics

We use Google Analytics to understand how visitors use our website. This tool collects anonymised data about pages visited, time spent on the site, geographic location (country or region level), and the device or browser used.

Google Analytics uses cookies to collect this data. We only activate Google Analytics after you have consented to analytical cookies via our cookie consent banner.

Legal basis: Consent.

You can opt out of Google Analytics tracking at any time by adjusting your cookie preferences on this site or by installing the Google Analytics opt-out browser add-on available at tools.google.com/dlpage/gaoptout.

Email Marketing

If you subscribe to our mailing list, we collect your name and email address. We use this information to send you content, updates, and information about our services.

We will only add you to our mailing list with your explicit consent. You can unsubscribe at any time by clicking the unsubscribe link in any email we send, or by contacting us directly.

Legal basis: Consent.

Squarespace Platform Data

Our website is hosted on Squarespace. Squarespace collects certain technical data as part of hosting and operating the website, including IP addresses and basic usage data. Squarespace acts as a data processor on our behalf and is bound by its own data processing terms. For more information, see Squarespace's Privacy Policy at squarespace.com/privacy.

3. Cookies

Our website uses cookies. Cookies are small text files stored on your device that help us understand how the site is used and improve your experience.

We use the following categories of cookies:

Strictly necessary cookies: Required for the website to function. These cannot be disabled.
Analytical cookies: Used by Google Analytics to collect anonymised data about how the site is used. These are only activated with your consent.

When you first visit our website, you will be shown a cookie consent banner. You can accept or decline analytical cookies at that point. You can change your preferences at any time.

4. How Long We Keep Your Data

We do not keep your personal data for longer than necessary for the purposes for which it was collected.

Contact form submissions: We retain these for as long as is reasonably necessary to respond to your enquiry and for a reasonable period thereafter in case of follow-up.
Analytics data: Google Analytics data is retained in accordance with our Google Analytics settings, typically 14 months.
Email marketing data: We retain your details for as long as you remain subscribed to our mailing list. Upon unsubscribing, your data will be removed within a reasonable timeframe.

5. Who We Share Your Data With

We do not sell your personal data. We do not share your data with third parties for marketing purposes.

We share data only with the following service providers who process it on our behalf:

Squarespace Inc. (website hosting and contact forms)
Google LLC (analytics, via Google Analytics)

Each of these providers is required to handle your data in accordance with applicable data protection law. Where data is transferred outside the European Economic Area, appropriate safeguards are in place, including Standard Contractual Clauses.

6. Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights regarding your personal data:

Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct inaccurate or incomplete data.
Right to erasure: You can ask us to delete your personal data in certain circumstances.
Right to restriction: You can ask us to restrict how we use your data in certain circumstances.
Right to data portability: You can request a copy of your data in a structured, machine-readable format.
Right to object: You can object to our processing of your data where we rely on legitimate interest as the legal basis.
Right to withdraw consent: Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at hello@candorandcoast.com. We will respond within 30 days.

7. How to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the relevant supervisory authority.

As we are based in Portugal, the relevant authority is:

Comissão Nacional de Proteção de Dados (CNPD) Av. D. Carlos I, 134, 1º 1200-651 Lisboa Portugal Website: cnpd.pt

We would, however, appreciate the opportunity to address your concerns directly before you approach the CNPD. Please contact us first at hello@candorandcoast.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website after any changes constitutes your acceptance of the updated policy.

9. Contact

For any questions, requests, or concerns relating to this Privacy Policy or your personal data, please contact us:

Candor & Coast Inc.