1. Data Controller

Move The Needle s.r.o., Pricna 4, 110 00 Prague, Czech Republic ("we", "us", "our") is the data controller responsible for your personal data.

Contact email: hello@moveneedle.co

2. What Data We Collect

We may collect the following personal data:

Name and email address (when you submit a form)
Company name and website URL
Information you provide in assessment forms or contact forms
Usage data (pages visited, time spent, browser type) via cookies, if you consent

3. How We Use Your Data

We process your personal data for the following purposes:

To respond to your inquiries and provide our consulting services
To deliver the free micro-assessment you request
To send you relevant communications (only with your consent)
To improve our website and services through analytics (only with your cookie consent)

4. Legal Basis for Processing

We process your data based on: (a) your consent (e.g., cookie consent, form submissions), (b) performance of a contract or pre-contractual measures, and (c) our legitimate interests in improving our services, provided these do not override your rights.

5. Cookies

Our website uses cookies. When you first visit, a cookie consent banner allows you to accept or decline non-essential cookies. Essential cookies required for the website to function are always active. Analytics and marketing cookies (including HubSpot) are only loaded after you give explicit consent. You can change your preferences at any time by clearing your browser cookies.

6. Third-Party Services

We use the following third-party services that may process your data:

HubSpot — CRM and marketing automation (only with cookie consent)
Resend — transactional email delivery
Vercel / Lovable — website hosting

These providers are based in the US and comply with appropriate data protection standards. Data transfers outside the EU/EEA are covered by Standard Contractual Clauses or equivalent safeguards.

7. Data Retention

We retain your personal data only as long as necessary for the purposes described above, or as required by law. Form submissions are typically retained for 3 years unless you request earlier deletion.

8. Your Rights

Under the GDPR, you have the right to:

Access your personal data
Rectify inaccurate data
Request deletion of your data
Restrict or object to processing
Data portability
Withdraw consent at any time
Lodge a complaint with the Czech Data Protection Authority (ÚOOÚ)

To exercise any of these rights, contact us at hello@moveneedle.co.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.