Privacy Policy

Last updated: 30 March 2026

1. Data Controller

The data controller responsible for your personal data is:

Pergamon Labs Limited
Unit 502, 5/F, Lu Plaza
2 Wing Yip Street, Kwun Tong, Kowloon, Hong Kong
Email: info@pergamon-labs.com

2. Personal Data We Collect

We collect the following categories of personal data:

  • Account data: Name, email address, company name, job title when you create an account or request a demo.
  • Payment data: Billing address and payment method details processed by our payment provider. We do not store full credit card numbers.
  • Usage data: Pages visited, features used, session duration, and device information collected automatically through cookies and analytics.
  • Communication data: Content of messages you send to us via contact forms, email, or support channels.
  • Content data: Product documentation, manuals, and other content you create, upload, or store within the Pergamon platform.

3. Legal Basis for Processing (GDPR Art. 6)

  • Contract performance (Art. 6(1)(b)): Processing necessary to provide the Pergamon platform and services you have subscribed to.
  • Legitimate interest (Art. 6(1)(f)): Analytics, fraud prevention, platform security, and improving our services.
  • Consent (Art. 6(1)(a)): Marketing communications and non-essential cookies. You may withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c)): Tax, accounting, and regulatory requirements.

4. How We Use Your Data

  • To provide, maintain, and improve the Pergamon platform
  • To process transactions and manage your subscription
  • To respond to your enquiries and provide customer support
  • To send transactional emails (account confirmations, password resets)
  • To send marketing communications (with your consent)
  • To analyse platform usage and improve user experience
  • To detect and prevent fraud and security threats
  • To comply with legal obligations

5. Data Sharing and Transfers

We share personal data only with:

  • Service providers: Cloud hosting (AWS, EU region), payment processing, email delivery (Resend), analytics. All processors are contractually bound to GDPR standards.
  • Legal authorities: When required by law or to protect our legal rights.

We do not sell your personal data to third parties. Data is hosted on AWS servers within the European Union. Where data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we retain data for up to 30 days for recovery purposes, and financial records for up to 7 years as required by law.

7. Your Rights (GDPR Art. 15-22)

Under the GDPR, you have the right to:

  • Access your personal data (Art. 15)
  • Rectification of inaccurate data (Art. 16)
  • Erasure of your data ("right to be forgotten") (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing based on legitimate interests (Art. 21)
  • Withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at info@pergamon-labs.com. We will respond within 30 days.

8. Cookies

We use essential cookies required for the platform to function and analytics cookies to understand how visitors use our website. Non-essential cookies are only placed with your consent.

  • Essential cookies: Session management, authentication, security. Cannot be disabled.
  • Analytics cookies: Usage statistics to improve the platform. Placed with consent only.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption at rest and in transit, access controls, and regular security audits. Our infrastructure is hosted on AWS with ISO 27001 certification.

10. Children's Privacy

Pergamon is a B2B service not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on our website. The "Last updated" date at the top of this page indicates the most recent revision.

12. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

13. Contact

For any questions about this Privacy Policy or our data practices, contact us at:

info@pergamon-labs.com