Privacy Policy

1. Introduction

This privacy policy explains how Skarabo Life ("we", "I", "me"), operated by Lotte de Bruijn, collects, uses, and protects your personal data when you visit skarabolife.com or contact us through the website.

Skarabo Life is a plant-based catering business based in Portugal. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR).

2. Data We Collect

Contact Form Submissions

When you fill in our contact form, we collect:

• Name
• Email address
• Phone number (optional)
• Service type interest (Retreats, Catering, or Festivals)
• Message content

Technical Data

Our web hosting automatically collects standard server logs, which may include your IP address and browser type. This data is used for security and performance purposes only.

Cookies & Analytics

This website does not use third-party tracking cookies. We do not use Google Analytics, Facebook Pixel, or any similar tracking services. Our analytics provider (Vercel Web Analytics) is privacy-friendly and does not use cookies. Essential session cookies may be used for the admin panel only.

3. How We Use Your Data

• To respond to your inquiries about our catering, retreat, and festival services
• To manage our business operations

We do not sell or share your data with third parties. We do not use your data for marketing purposes unless you have given explicit consent to receive marketing communications.

4. Legal Basis

Under the GDPR, we process your data based on:

• Consent (Article 6(1)(a)) — You give consent when you check the agreement checkbox on our contact form
• Legitimate interest (Article 6(1)(f)) — Responding to your inquiry and managing business operations

5. Data Storage & Security

• Your data is stored in Supabase, hosted in an EU data centre (Ireland)
• All data is encrypted in transit (HTTPS) and at rest
• Access to your data is restricted to Lotte de Bruijn only

6. Data Retention

• Contact form submissions: Retained for 12 months, then deleted
• Blog content: Retained indefinitely (publicly available content)

7. Your Rights

Under the GDPR, you have the right to:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your data ("right to be forgotten")
• Restrict processing — Request that we limit how we use your data
• Data portability — Request your data in a machine-readable format
• Object — Object to the processing of your data

To exercise any of these rights, please email lotte@skarabolife.com. We will respond within 30 days.

8. Third-Party Services

We use the following third-party services:

• Supabase — Database hosting (EU). Privacy Policy
• Vercel — Website hosting. Privacy Policy

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking services.

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

10. Contact

For any questions about this privacy policy or how we handle your data, please contact: