Privacy Policy.

Who we are

Portiko is operated by Novatib Ltd, a company registered in England and Wales (company number 14234369). For the purposes of UK GDPR and the Data Protection Act 2018, Novatib Ltd is the data controller for personal data processed through this website and our products.

For any privacy or data protection question, contact us at contact@portiko.co.uk.

What information we collect

We collect only the personal data we genuinely need.

Information you give us directly. When you subscribe to Portiko updates via the email form, we collect your email address and (if you provide it) your name. When you contact us by email, we collect whatever you choose to share.

Information we receive when you make a purchase. Purchases are processed by Gumroad, our payment processor. Gumroad collects your name, email address, billing details, and (depending on the payment method) partial card information. We receive a record of your purchase from Gumroad including your name, email address, country, and what you bought. We do not receive or store your full payment card details.

Information we collect automatically. By default, this site uses no tracking cookies, no analytics, and no third-party advertising. If we add privacy-friendly analytics (such as Cloudflare Web Analytics or Plausible) we will update this policy and note it here. We do not fingerprint visitors or build behavioural profiles.

How we use your information

We use the personal data we collect for clearly defined purposes:

• To deliver the products you have purchased.
• To respond to questions, refund requests, and other correspondence.
• To send you product updates and launch announcements if you have subscribed to our updates list. You can unsubscribe at any time via the link in any email.
• To meet our legal obligations — including tax record-keeping (we retain purchase records for six years per UK HMRC requirements) and responding to lawful requests from regulators.

We will not sell your personal data, share it with marketing partners, or use it to target advertising at you. Ever.

Lawful basis for processing

Under UK GDPR, we rely on the following lawful bases:

• Contract — for processing your purchase and delivering the products you have bought.
• Consent — for sending you marketing emails (which you can withdraw at any time).
• Legal obligation — for retaining purchase records for tax purposes.
• Legitimate interests — for responding to your enquiries and improving our products. Our legitimate interests are balanced against your rights and freedoms.

Who we share your information with

We share your personal data with a small number of trusted service providers, only where necessary, and only for the purposes listed below.

• Gumroad, Inc. — payment processing and digital product delivery. Gumroad operates from the United States; transfers are protected under the UK-US Data Bridge or equivalent safeguards. See Gumroad's privacy policy.
• Email service provider — for our updates list. Currently we use Formspree for form submissions; we may move to a UK or EU-based provider in future and will update this policy accordingly.
• Microsoft Corporation — we use Microsoft 365 for email. Emails you send to us are stored on Microsoft's UK or EU servers under Microsoft's data processing agreement.
• Hosting provider — this website is served via a content delivery network. The CDN may receive your IP address as part of the standard process of serving web content; this is not retained for analytical purposes.

We may also share your data where we are legally required to do so (for example, in response to a valid court order or regulatory request).

How long we keep your information

• Newsletter subscribers: until you unsubscribe.
• Purchase records: six years from the date of purchase, as required by UK tax law.
• Email correspondence: up to three years after the conversation ends, unless the matter is ongoing.

Your rights

Under UK GDPR you have the following rights:

• Access — you can ask for a copy of the personal data we hold about you.
• Rectification — you can ask us to correct inaccurate data.
• Erasure — you can ask us to delete your data, subject to our legal retention obligations.
• Restriction — you can ask us to limit how we use your data.
• Portability — you can ask for your data in a portable format.
• Objection — you can object to processing based on legitimate interests.
• Withdraw consent — you can withdraw consent for marketing at any time.
• Complain to the ICO — you can lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.

To exercise any of these rights, email contact@portiko.co.uk. We will respond within one calendar month.

Cookies

This site sets no first-party tracking cookies. The only cookies that may be set are third-party cookies that are necessary when you click through to Gumroad to complete a purchase, and these are governed by Gumroad's own privacy policy. We do not display a cookie banner because no consent-requiring cookies are set on the Portiko site itself.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be highlighted on the site and, where appropriate, communicated to subscribers by email.

Contact

Questions, requests, or concerns about how we handle your personal data: contact@portiko.co.uk.