Privacy Policy

Last updated: 13/05/2026

Controller

The controller of the personal data is Scalyprung, Lda., with registered office at Avenida Dr. Francisco Sá Carneiro, 3610-134 Tarouca, Portugal, Portuguese corporate taxpayer number 516324705, holder of the Yooddle brand, hereinafter referred to as “TheThrivers”.

Scope

This Privacy Policy applies to personal data collected through the Yooddle website, contact forms, demonstration requests, communication subscriptions, use of the Tool, participation in campaigns or events and other interactions associated with the service.

General Principles Applicable to the Processing of Personal Data

TheThrivers undertakes to ensure that the personal data it processes is:

• processed lawfully, fairly and transparently in relation to the data subjects;
• collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with the purposes for which it is processed;
• accurate and kept up to date whenever necessary;
• kept in a form which permits identification of data subjects only for the period necessary for the purposes for which it is processed;
• processed in a manner that ensures its security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, with appropriate technical or organisational measures being adopted.

Categories of Data Processed

• identification and contact data, such as name, email address, job title, company, country or city, when provided voluntarily;
• usage and browsing data, such as IP address, online identifiers, browser, device, operating system, pages visited, date and time of access, traffic source and interaction metrics;
• data associated with accounts, authentication, support, commercial requests, demonstrations and communications exchanged with Yooddle;
• content, metadata and operational information processed in the context of using the Tool, to the extent that it contains or reveals personal data.

Purposes and Legal Bases

Sources of Data

Personal data may be collected directly from the data subject through the completion of forms, registration or use of the Tool, and indirectly through cookies, pixels, analytics tools, system logs or technology partners used by Yooddle.

Transfer of Personal Data

In the context of processing User Data, TheThrivers uses or may use third-party entities subcontracted by it to process User Data on its behalf and in accordance with the instructions given by it. TheThrivers ensures that such subcontracting entities provide sufficient guarantees for the implementation of appropriate technical and organisational measures so that the processing meets the requirements of applicable law and ensures the security and protection of the rights of data subjects, under the subcontracting agreement entered into with such subcontracting entities.

TheThrivers may also transmit personal data of its Clients to third-party entities not qualified as subcontracting entities whenever it deems such data communications necessary or appropriate:

• in light of applicable law;
• in compliance with legal obligations/court orders; or
• to respond to requests from public or governmental authorities.

Accordingly, TheThrivers may transmit your personal data to public authorities and regulators.

International Transfers

Whenever processing involves transfers of data outside the European Economic Area, Yooddle shall adopt the appropriate safeguards required by law, namely adequacy decisions, standard contractual clauses, proportionate supplementary measures or any other legally admissible mechanism.

Retention Period for Personal Data

The personal data collected is processed in strict compliance with applicable legislation and stored in specific databases created for this purpose.

The period during which personal data collected by TheThrivers is stored and retained varies according to the purpose for which the information is processed, and such data is archived only for the time necessary to fulfil the purposes for which it is processed.

There are legal requirements that require data to be retained for a minimum period. Therefore, whenever there is no specific legal obligation, the data shall be stored and retained only for the minimum period necessary for the purposes that motivated its collection or subsequent processing, after which it shall be deleted.

Rights of Personal Data Subjects

Under the General Data Protection Regulation, the data subject has the following rights in relation to the processing of their personal data:

Right to Information

The right to receive information about the terms of the processing of their personal data at the time of collection or, if the data is not collected from the data subject, within a reasonable period after obtaining the personal data, except in the cases provided for in the General Data Protection Regulation.

Right of Access

The right to obtain confirmation as to whether or not personal data is being processed and, where that is the case, the right to access their personal data, as well as information on the purposes of the processing, the categories of personal data concerned, the recipients of the data, the envisaged retention period, among others.

Right to Rectification

The right to obtain, without undue delay, the rectification or updating of inaccurate personal data concerning them.

Right to Erasure

The right to obtain the erasure of their personal data, without undue delay, in certain circumstances determined by law.

Right to Restriction of Processing

The right to obtain restriction of processing where one of the conditions provided for in the General Data Protection Regulation applies.

Right to Data Portability

The right to receive the personal data concerning them, which they have provided, in a structured, commonly used and machine-readable format.

Right to Object

The right to object, at any time, on grounds relating to their particular situation, to the processing of personal data concerning them, namely where their data is processed for direct marketing purposes.

Right Not to Be Subject to Automated Individual Decisions

The right not to be subject to any decision based solely on the automated processing of their personal data, including profiling, which produces legal effects concerning them or similarly significantly affects them.

Right to Lodge a Complaint with the Supervisory Authority

The right to lodge a complaint with the competent supervisory authority under the law, the Comissão Nacional de Proteção de Dados, if they consider that their data is not being lawfully processed by TheThrivers, under the terms of applicable legislation and this Policy.

Under the law, the data subject is also guaranteed the right to withdraw their consent for the processing of data where consent constitutes the legal basis for the respective processing. For this purpose, they have the right to withdraw their consent at any time, which shall not, however, affect the lawfulness of the processing carried out up to that date based on the consent previously given.

These rights may be exercised at any time by the User through the following email address: privacy@yooddle.com.

TheThrivers shall respond in writing, including by electronic means, to the User’s request within a maximum period of one month from receipt of the request, except in cases of particular complexity, in which case this period may be extended by up to two months.

If the requests submitted by the User are manifestly unfounded or excessive, particularly due to their repetitive nature, TheThrivers reserves the right to charge administrative costs or refuse to act on the request.

Minors

Yooddle does not intend to knowingly collect personal data from minors without the appropriate legal framework.

Where processing depends on consent in the context of information society services, use by minors below the applicable legal age depends on authorisation from the holder of parental responsibility.

If Yooddle becomes aware of the improper collection of data from a minor without an appropriate legal basis, it shall adopt reasonable measures to delete or regularise the situation.

Security

Yooddle adopts technical and organisational measures that are appropriate and proportionate to the risk in order to protect personal data against unauthorised destruction, loss, alteration, disclosure or access.

These measures include access controls, profile segregation, credential management, system updates, monitoring and internal policies appropriate to the context of the service.

Cookies and Similar Technologies

The use of cookies and similar technologies is governed by Yooddle’s Cookie Policy, which should be read together with this Privacy Policy.

Changes and Contact

This Policy may be reviewed at any time to reflect legal, technical, organisational or product changes.

The version in force shall be the one published on the website.

For the exercise of rights or additional clarifications: privacy@yooddle.com.