Effective date: 26 October 2026
This policy explains how Douro Data, LLC and Douro Data Privacy Services LLC (together "Douro Data", "we", "us") handle personal data when you visit dourodata.com or privacy.dourodata.com, contact us, or work with us. Douro Data, LLC runs our data products and analytics work at dourodata.com. Douro Data Privacy Services LLC, a Wyoming limited liability company, runs our privacy services at privacy.dourodata.com.
Each company is the controller of the personal data collected through its own site and work. Steve Murphy runs both, so the contact details below reach the right person for either:
We have not appointed a Data Protection Officer, because the GDPR doesn't require one for a business of our size and activity. Steve Murphy, our founder, handles all privacy questions directly.
The purpose of this privacy policy (this "Privacy Policy") is to inform users of our Site of the following:
This Privacy Policy applies in addition to the terms and conditions of our Site.
We don't ask for sensitive personal data, such as health or financial details about you as a person. Please don't include it in a form or email.
We don't sell personal data. We don't use it to make automated decisions that have legal or similarly significant effects on you.
We use Osano to ask for your choice before any analytics runs. These are the cookies and browser storage our sites use:
If your browser sends a Global Privacy Control or Do Not Track signal, our cookie banner treats it as a choice not to accept analytics cookies.
You can change your choice at any time: use the Cookie Preferences button on dourodata.com, or the Storage Preferences link at the bottom of privacy.dourodata.com.
We use analytics only to understand how our sites are used, not for advertising.
We use these service providers to run the business. Each one processes data on our behalf, for the purpose listed.
We may also share personal data when the law requires it, to establish or defend legal claims, or with a buyer if the business is sold. Our sites link to other websites, whose privacy practices are their own.
We work from the EU, and most of our service providers are based in the United States. When personal data from the EU or UK goes to a provider outside those regions, we rely on the EU-US Data Privacy Framework (and its UK extension) where the provider is certified, or on standard contractual clauses. You can ask us for a copy of the relevant safeguards.
If you ask us to stop contacting you, we keep only your email address on a suppression list, so that we don't contact you again.
If you are in the EU or UK, you can ask us to:
If you live in a US state with a consumer privacy law, you have similar rights to know, access, correct and delete your data. We don't sell personal data, or share it for cross-context behavioral advertising.
To use any of these rights, email support@dourodata.com or use our privacy center at privacycenter.dourodata.com. We will reply within one month, and we may ask you to confirm your identity first. We won't treat you differently for using your rights.
If you're unhappy with how we handled your data, please tell us first so we can try to fix it. You can also complain to a data protection authority. Since we work from Portugal, ours is the Comissão Nacional de Proteção de Dados (CNPD). You can also complain to the authority where you live or work. In the UK, that's the Information Commissioner's Office.
When we run privacy work for a client, including through the Douro Privacy Ledger, we process their data on their instructions under our agreement with them. In that work the client is the controller, and their own privacy notice applies. If your data is part of that work, contact the client first. We will help them answer you.
Our sites and services are for businesses. We don't knowingly collect personal data from anyone under 16. If we learn that we have, we will delete it.
We limit access to the people who need it. We use multi-factor authentication on the systems that hold personal data, and we delete data when we no longer need it. No system is perfectly secure, but we will tell you and the relevant authority about a breach when the law requires it.
When we change this policy, we update the effective date at the top. If a change materially affects how we use your data, we will say so on this page and, where we have your email address and the change affects you, email you.
Email support@dourodata.com, or write to:
Douro Data Privacy Services LLC
32 N Gould St, Sheridan, WY 82801, USA