Policies

Third parties

We may use subprocessors such as email providers, calendar tooling, and document collaboration platforms that process personal data on our instructions. Subprocessors are selected using quality standards appropriate to enterprise markets. A current list is available on request to privacy@backup-desk.digital routing to the same mailbox as welcome@backup-desk.digital for operational simplicity.

We do not sell personal data. Where a subprocessor operates outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses where required under GDPR.

Contact

The data controller is Pipeline Lantern, reachable at welcome@backup-desk.digital or by post at Váci út 45, 1134 Budapest, Hungary. For data subject requests, include enough detail for us to verify identity and scope the request. We respond within one month unless complexity requires an extension as permitted by GDPR.

If you believe processing violates the GDPR, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or your local supervisory authority.

Scope

This Privacy Policy describes how we process personal data when you visit backup-desk.digital, request information, subscribe to briefings, or contract advisory services. It does not govern customer environments that we merely review; those remain your responsibility as an independent controller where applicable.

Processing is limited to what is necessary for the purposes described below. We apply data minimisation and purpose limitation in line with GDPR principles.

Retention

Contact form submissions and related correspondence are retained for up to twenty-four months unless a longer period is required for legitimate interests such as dispute resolution. Advisory project records are retained for seven years from project completion unless a different period is agreed in writing for operational record-keeping.

Newsletter subscription data is retained until you withdraw consent or we retire the programme, after which we delete or anonymise subscriber records within ninety days.

Data collected

We collect identifiers such as name, email address, company name, and role when you submit forms or correspond with us. Usage data such as pages visited, approximate region, and device type may be collected through analytics cookies if you opt in. Technical logs may include IP addresses for short-term security monitoring.

We do not intentionally collect special categories of data. If such information appears in a message you send, we will delete it unless a legal obligation requires retention.

Rights

Under the GDPR, you may request access, rectification, erasure, restriction, portability, and objection where grounds exist. You may withdraw consent for marketing or non-essential cookies at any time without affecting the lawfulness of processing based on consent before withdrawal.

We verify requests proportionally and may ask for additional information to protect accounts from impersonation. Where requests are manifestly unfounded or excessive, we may charge a reasonable fee or refuse the request as permitted by law.

Use of data

We use personal data to respond to enquiries, deliver services, issue invoices, improve our website when analytics are allowed, and comply with legal obligations. Legitimate interests include securing our site and understanding which content is useful to prospective clients, balanced against your rights.

Automated decision-making with legal or similarly significant effects is not applied to website visitors or advisory clients through this processing. Profiling, if any, is limited to aggregate analytics without individual targeting for advertising.

Contact

Cancellation and refund questions should be emailed to welcome@backup-desk.digital with your company name, engagement reference, and preferred resolution. We respond within five business days with next steps.

Eligibility

Business purchasers in Hungary may rely on statutory rights where applicable alongside these contractual terms. Consumers, where applicable, have a fourteen-day right of withdrawal for distance contracts unless an exception applies because services have begun with consent.

Scope

This policy covers fixed-scope advisory packages and retainers sold directly by Pipeline Lantern. Third-party marketplace purchases are governed by the marketplace rules.

Timeframe

Approved refunds for eligible prepaid amounts are initiated within fourteen business days using the original payment method where technically possible. Wire transfers may require additional processing time depending on institutions.

Exceptions

Fees for work already performed, workshops already delivered, or materials already transferred are generally non-refundable. Custom research that cannot be reused may be partially billable as stated in your order form.

Process

To request cancellation, send written notice before the kickoff date agreed in your statement of work. If kickoff has passed, we prorate refunds only where explicitly stated in the contract. Disputes should first follow good-faith escalation between project sponsors before any external filing.