# Privacy Policy Version: 1.2 Last modified: 02.09.2026 In this policy, we lay out: what data we collect and why, how your data is handled, and your rights with respect to your data. We never sell your data, and we never collect anything without telling you what it is for. ## What we collect and why Our guiding principle is to collect only what we need and nothing more. It is the BASED way. Instead of increasing data footprint with unnecessary data, companies should collect only relevant data. ### Cookies No cookie is stored on your device until you answer the cookie card shown on your first visit, and declining takes the same single click as accepting. The site works exactly the same either way. If you accept, we set analytics and marketing cookies (Google Analytics) to understand which pages perform and to improve the site. Your choice is remembered in your browser for six months, after which we ask again. You can change it at any time via **Cookie settings** in the footer; declining stops the tags immediately. If you decline or never answer, no cookies are set. Google's tags then send only limited, cookieless technical signals that Google uses to produce aggregate estimates ("consent mode"); these are not used to identify or profile you. Signing in to a BASED service sets one strictly necessary session cookie that authenticates you; it is not used for tracking and needs no consent. ### Third-party processors To provide our products and services, we use some third-party subprocessors to help run our applications and provide our products and services to you. - [Cloudflare](https://www.cloudflare.com/privacypolicy/) - Pages: Website hosting - Web analytics: Privacy-friendly website analytics - Turnstile: CAPTCHA service - [Google](https://policies.google.com/privacy) - Analytics: Website analytics, only with your consent - [iClosed](https://www.iclosed.io/privacy-policy): Call scheduling that powers the booking calendar on the front page and processes the details you enter when booking - [Stripe](https://stripe.com/en-en/privacy): Payments processing - [Postmark](https://postmarkapp.com/): Transactional emailing service - [Mailcoach](https://www.mailcoach.app/): Marketing, updates, and newsletter email services ### Identity When you sign up or purchase from BASED, we will only collect your email address to send you the products you have subscribed to, provide you with product updates, and share other essential information directly related to your subscription. We will also collect your email if you sign up for our newsletter or use the sample form to request a product sample. Emails are stored in Stripe, Postmark, and Mailcoach. We may send you optional surveys from time to time to improve our products. With your consent, we will send you our newsletter and other updates. Through the contact form, we collect your email and optionally your phone number. Any voluntary information you provide in the message is also collected. These are only stored in our email inbox and are not shared with any other third parties. This is solely for us to contact you using a method you prefer. We will never sell your personal information to third parties. ### Billing information During purchase, you are directed to our payment processor () to provide your credit card details. Your credit card information never hits any of BASED servers. We are able to access the payment transaction details from Stripe, which include the last 4 digits of your credit card number, the name on the card, and the card provider. ### Website analytics With your consent (see Cookies above), we use Google Analytics to understand how the site is used: which pages are viewed, where visitors come from, and which content performs. We use this to improve the site and its content. We do not sell this data or use it to identify you personally. We also use Cloudflare's privacy-friendly analytics () for basic, consent-free measurement such as the referrer and the page viewed. Cloudflare Web Analytics does not use any client-side state, such as cookies or localStorage, to collect usage metrics, and does not "fingerprint" individuals via their IP address, User Agent string, or any other data. ### Anti-bot assessments We use privacy-friendly CAPTCHA from Cloudflare ("Cloudflare Turnstile") to protect some of our open forms on our website from bots, such as the contact form or sign-in form. Cloudflare Turnstile service evaluates various information (e.g., IP address, how long the visitor has been on the website, mouse movements) to try to detect if the activity is from an automated program instead of a human. We do not have access to any of this information. ## Data retention We keep your information for the time necessary for the purposes for which it is processed. The length of time for which we retain information depends on the purposes for which we collected and use it and your choices, after which time we may delete and/or aggregate it. We may also retain and use this information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. ## Changes and questions We may update this policy as needed to comply with relevant regulations and reflect any new practices. If we make significant changes, we will refresh the date at the top of this page. Have any questions, comments, or concerns about this privacy policy, your data, or your rights with respect to your information? Please get in touch by emailing us at [contact+privacy@based.limited](mailto:contact+privacy@based.limited).