Privacy Policy

1. Introduction

Parsley ("we," "us," or "our") operates the parsley.id website and digital business card platform (the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We are committed to protecting your privacy and ensuring you have control over your personal information. This policy complies with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

2. Data Controller

For the purpose of UK GDPR, the data controller is Parsley. You can contact us for any data protection queries.

3. Information We Collect

3.1 Information You Provide

We collect the following information when you use our Service:

• Account information (email, password, name)
• Profile information (job title, company, bio, contact details)
• Content you create (profile sections, links, images, videos)
• Contact information from visitors to your profile
• Organization and team information (if using Business plan)
• Payment information (processed securely by Stripe, not stored by us)
• Feedback and correspondence when you contact us

3.2 Information Automatically Collected

When you visit our Service, we automatically collect:

• Usage data (profile views, link clicks, page visits, time spent)
• Device information (IP address, browser type, operating system)
• Analytics data (visitor location, referral sources)
• Cookies and similar tracking technologies

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract Performance: To provide the Service you signed up for
• Legitimate Interests: To operate and improve our Service, analyze usage patterns, and provide relevant features
• Consent: For cookies and analytics where required (you can withdraw consent at any time)
• Legal Obligation: To comply with applicable laws and regulations

5. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our Service
• To create and display your public profile
• To process contact form submissions and lead capture
• To provide analytics and insights about your profile performance
• To process payments and manage subscriptions
• To respond to your inquiries and provide customer support
• To send service-related notifications and updates
• To detect, prevent, and address technical issues and security vulnerabilities
• To comply with legal obligations

6. Information Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Public Profiles: Information you include in your public profile is visible to anyone who visits your profile URL
• Service Providers: We share information with trusted third-party providers (Firebase, Vercel, Stripe) who assist in operating our Service
• Legal Requirements: We may disclose information when required by law or to protect our rights, property, or safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets
• With Your Consent: We may share information with your explicit consent

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Profile data: Retained while your account is active
• Analytics data: Retained for up to 2 years
• Contact form submissions: Retained until you delete them
• Payment records: Retained for 7 years for accounting purposes
• Deleted accounts: Data permanently deleted within 30 days

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (you can delete your account anytime)
• Right to Restrict Processing: Request limitation of processing in certain situations
• Right to Data Portability: Request transfer of your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, please contact us. We will respond to your request within one month.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Keep you signed in to your account
• Track profile views and link clicks for analytics
• Understand how visitors use our Service
• Improve user experience and performance

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of the Service.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption in transit (HTTPS/TLS) and at rest
• Firebase Authentication for secure user login
• Role-based access controls and permissions
• Regular security audits and monitoring
• Secure payment processing through Stripe (PCI DSS compliant)

However, no internet transmission is completely secure, and we cannot guarantee absolute security.

11. International Data Transfers

Our Service uses third-party providers (Firebase, Vercel) that may process data outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place:

• Adequacy decisions by the UK government
• Standard contractual clauses approved by UK authorities
• Service providers certified under recognized data protection frameworks

12. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us so we can take appropriate action.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us.

15. Supervisory Authority

If you believe we have not handled your personal data in accordance with this Privacy Policy or applicable data protection laws, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters: