Privacy Policy

    Last updated: 07/29/2025 1. Introduction and Scope Notable Octopus, Unipessoal Lda. ("we", "our") is responsible for processing your personal data within the scope of the services provided through its institutional website and other online channels managed by the same entity. This Privacy Policy describes how we collect, use, store, and share your personal data when you visit our website or contact us through our digital channels. It applies to all visitors and users of the Notable Octopus website, as well as to individuals who contact us directly or indirectly. By using our website or online services, you agree to the terms of this Policy. 2. Definitions For the purposes of this Policy, the following terms mean: • Personal data: any information relating to an identified or identifiable natural person; • User: any person who uses the services and content made available through Notable Octopus’s website and digital channels; • Website: the institutional website of Notable Octopus accessible via https://notableoctopus.com/. 3. Information We Collect 3.1 Information provided directly We collect data you voluntarily provide through the website, including but not limited to: • Filling in contact forms or newsletter subscriptions; • Communication via email or other contact methods provided on the site; • Participation in campaigns, surveys, or events promoted by Notable Octopus. This data may include, among others: • Full name; • Email address; • Phone number; • Information voluntarily provided in messages or forms. 3.2 Information collected automatically When you browse our website, we automatically collect data through cookies, web beacons, log files, and similar technologies, such as: • IP address; • Browser type and version; • Device model and operating system; • Browser language and time zone; • Referral URLs; • Pages visited, time spent, clicks, and browsing behavior; • Performance data and technical errors. The processing of personal data collected through non-essential cookies (such as analytics or marketing cookies) is based on the user’s explicit consent, according to Article 6(1)(a) of the GDPR. 3.3 Third-party information If you use any external service allowing login or interaction (e.g., Google for comments or forms), we may receive the following information: • Name associated with the account; • Email address; • Profile picture. 4. How We Use the Information We use the collected data to: • Provide, operate, and personalize the Notable Octopus website and institutional services; • Communicate with you, either to respond to requests or inquiries or to send institutional or promotional information, whenever you have given consent; • Ensure website security and prevent fraud or unauthorized access; • Comply with applicable legal obligations; • Send marketing communications and newsletters exclusively with the user’s express consent. 5. Data Sharing and Transfers We may share your data with: • Communication platforms (e.g., Sendinblue, Mailchimp) that manage subscription lists and consents; • Legal authorities when required by law. Banking Data Transfer and Storage The Notable Octopus institutional website neither processes nor stores users’ banking or payment data, as it does not offer services involving payments or subscriptions. 6. Legal Basis for Data Processing (GDPR) The processing of personal data collected via this website relies on the following legal bases under the General Data Protection Regulation (GDPR): • Explicit consent – when you provide your data through contact forms or newsletter subscriptions; • Legitimate interest – to improve website browsing experience and security; • Legal obligation – when necessary to comply with legal duties applicable to Notable Octopus. 7. Data Retention and Deletion We keep your personal data only as long as strictly necessary to fulfill the purposes for which it was collected or as required by applicable law. After account cancellation or upon deletion request, data may be retained for 5 to 10 years to comply with legal, tax, and accounting obligations or to resolve disputes. After this period, data is securely deleted, ensuring confidentiality. 8. Cookies and Similar Technologies We use cookies to improve performance, analyze usage, and personalize content. For details on the types of cookies used, purposes, and preference management, please consult our Cookie Policy. 9. Information Security Notable Octopus implements appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or destruction. These measures include: • Data encryption where applicable; • Internal policies for restricted access and authentication; • Security monitoring of our systems and services; • Regular security practice reviews. Data Breach Notification In case of a personal data breach that poses a risk to data subjects, we will notify the National Data Protection Commission and, when required, the data subjects themselves in accordance with applicable law. 10. International Transfers If your personal data is transferred outside the European Economic Area (EEA), we ensure these transfers comply with GDPR. We adopt appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of protection for your data. 11. User Rights (GDPR) As a data subject, you have the right to: • Access, rectify, or erase your data; • Object to or restrict processing; • Request data portability; • Withdraw consent at any time. To exercise these rights, contact us at: geral@notableoctopus.com. Users also have the right to lodge a complaint with the National Data Protection Commission (www.cnpd.pt) if they believe their data is being processed in violation of the GDPR. 12. Use by Minors Our services are not intended for children under 13 years old. We do not knowingly collect data from minors. If data is collected without parental consent, it will be deleted immediately. 13. Automated Decisions We do not carry out individual decisions based solely on automated processing that produce legal or similar effects. 14. Users Outside the EU If you access our services outside the EU, your data may be processed within the EU, with protections in accordance with applicable law. 15. Marketing Communications We only send promotional communications (such as newsletters) to users who have given explicit consent (opt-in), notably through specific forms on our website. Consent can be withdrawn at any time by clicking the "unsubscribe" link included in each email or by contacting us directly. Note that transactional or administrative communications (e.g., responses to contact requests) may be sent regardless of marketing consent. 16. Intellectual Property and Terms of Use All content of the application — texts, images, videos, logos, structure, interface, and functionalities — is owned by Notable Octopus or licensed for exclusive use. Users have a limited right to access and use content under these terms. Copying, modifying, distributing, or reverse engineering without authorization is prohibited. 17. Changes to This Policy We reserve the right to update this Privacy Policy at any time for legal, operational, or service-related reasons. When this happens, we will publish the new version on this page and update the last modified date at the top of the document. Whenever changes are significant or involve new processing of personal data, we will notify users by email or via a prominent notice in the application, requesting renewed consent when legally required. We recommend reviewing this Policy periodically to stay informed about how we protect your data. 18. Contact Information For questions, requests, or to exercise your rights, contact us at: Notable Octopus, Unipessoal Lda. Email: suporte@neverskipmonday.com Website: https://neverskipmonday.com/ Notable Octopus, as the data controller, is not legally required to appoint a Data Protection Officer (DPO), but provides a dedicated channel for privacy matters through the above email address.