1. Introduction
Cloud Light Office ("we", "us", "our") publishes free guides about flexible online and remote work in Europe. This Privacy Policy describes how we handle personal data when you visit our website, read our guides or send us a message.
We have written this policy to be readable rather than legally obscure. It applies to our website and to any message you send us through our forms or email addresses.
2. Who we are
Cloud Light Office is the data controller for the personal data described in this policy. We are a remote-first editorial team working across the European Union and the European Economic Area, and we are not a recruitment agency.
For any question about this policy or about your personal data, you can contact us at [email protected] or through our Contact Us page.
3. The data we collect
We collect only the personal data we genuinely need to run the website and answer you. That may include:
- Data you give us. When you use a contact form or email us, we receive your name, email address, the subject of your message and whatever you write in the message itself.
- Technical data. When you visit the site, our hosting provider records the information your browser sends, such as your IP address, browser type, device type and the pages you view.
- Usage data. If you consent to analytics, we collect anonymous statistics about how the site is used - for example, which guides are read most often and how visitors move between pages.
We do not collect special-category data (such as health, political opinions or religion), and we do not ask for bank details, identity documents or payment information from job seekers.
4. How we use your data
We use personal data for the following purposes:
- To answer your questions, corrections and requests.
- To keep the website secure and prevent abuse, spam and fraudulent messages.
- To understand, in aggregate, which content is useful so we can improve our guides.
- To meet legal obligations that apply to us.
We do not sell your personal data, and we do not use it for automated decision-making or profiling that produces legal effects on you.
5. Legal bases for processing
Under the GDPR, we rely on the following legal bases:
- Consent - for optional analytics and any non-essential cookies. You can withdraw consent at any time.
- Contract or pre-contract - to respond to a message you have sent us or to provide a service you have requested.
- Legitimate interests - to keep the site secure, prevent fraud and improve our content, balanced against your rights.
- Legal obligation - where we are required to keep or disclose information by law.
6. Cookies and similar technologies
We use a small number of cookies and similar technologies to make the site work and, where you allow it, to measure how it is used. Strictly necessary cookies are always active; everything else is optional.
For the full list of cookies, what they do and how to control them, see our Cookie Policy.
7. Who we share data with
We share personal data only with organisations that help us run the website, and only as far as necessary:
- Our hosting and email providers, who store the site and deliver our messages.
- Analytics providers, where you have consented to analytics cookies.
- Professional advisers, if we ever need legal or accounting support.
- Public authorities, where we are legally required to disclose information.
Every provider we use is bound by a contract that requires it to protect your data and to process it only on our instructions.
8. International transfers
We prefer to keep data within the European Economic Area. Where a provider processes data outside the EEA, we put a lawful transfer mechanism in place - typically the European Commission's Standard Contractual Clauses - and, where required, an additional assessment of the safeguards involved.
9. How long we keep your data
- Messages from the contact forms are kept for as long as needed to handle your request and then, in an anonymised or deleted form, for a limited period for record-keeping.
- Technical and security logs are kept for a short period, usually no more than 12 months.
- Anonymous analytics data may be kept for up to 26 months.
When data is no longer needed, we delete it or make it anonymous so that it can no longer be linked to you.
10. Your rights
If you are in the EU or EEA, you have the right to:
- Access the personal data we hold about you.
- Rectify data that is inaccurate or incomplete.
- Erase data ("the right to be forgotten") in certain circumstances.
- Restrict how we use your data.
- Object to processing based on legitimate interests.
- Data portability - to receive data you gave us in a structured, machine-readable format.
- Withdraw consent at any time, without affecting processing carried out before you withdrew it.
To exercise any of these rights, email [email protected]. We will respond within one month. You also have the right to lodge a complaint with your national data-protection authority; in the EU and EEA, this is the supervisory authority in the country where you live, work or where the alleged infringement took place.
11. Security and children
We use appropriate technical and organisational measures to protect your data, including encrypted connections, access controls and regular software updates. No system is completely secure, so we encourage you not to send sensitive information through an ordinary message.
Our guides are written for adults who are looking for work. We do not knowingly collect personal data from children under 16. If you believe a child has sent us personal data, please contact us and we will delete it.
12. Changes and contact
We may update this policy when our practices or the law change. When we do, we will change the "last updated" date at the top of this page and, for significant changes, note them on the site.
For any question about this policy or about your personal data, contact [email protected], or read our Cookie Policy, Copyright Information and About Us pages.