Skip to content

Privacy Policy

Last updated: February 2026

1. Introduction

Noburo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website noburo.io, in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the ePrivacy Directive 2002/58/EC.

2. Data Controller

Noburo is an enterprise technology company based in the European Union. As the data controller, we are responsible for determining how your personal data is processed.

For privacy inquiries, contact our Data Protection team at [email protected].

3. Data We Collect

We collect minimal data, limited to what is strictly necessary:

  • Email address: Only if you voluntarily subscribe to our newsletter. Legal basis: your explicit consent (Art. 6(1)(a) GDPR).
  • Language preference: Stored locally in your browser (localStorage), never transmitted to our servers. This is not personal data under GDPR.
  • Cookie consent choice: Stored locally in your browser (localStorage). This is not personal data under GDPR.

4. How We Use Your Data

Your email address, if provided, is used exclusively to send you updates about Noburo's progress, insights, and vision. We will never sell, share, or use your email for any other purpose. The legal basis for this processing is your freely given, specific, informed, and unambiguous consent (Art. 6(1)(a) GDPR), which you provide by actively submitting the newsletter form.

5. Cookies and Tracking Technologies

Strictly necessary cookies (exempt from consent — ePrivacy Art. 5(3)):

  • Cloudflare security cookies (__cf_bm, cf_clearance): Set automatically by our hosting and CDN provider Cloudflare to protect the website against bot traffic and DDoS attacks. These cookies are strictly necessary for the operation of the website and are loaded without requiring your consent, as permitted by Art. 5(3) of the ePrivacy Directive.

Local storage (not cookies, no consent required):

  • Language preference and cookie consent choice: Stored via your browser's localStorage. This data never leaves your device and is not transmitted to any server.

Non-essential cookies: We do not use any analytics, tracking, advertising, or marketing cookies. We do not use Google Analytics, Facebook Pixel, or any similar tracking technology. Should we ever introduce non-essential cookies in the future, they will be blocked by default and only activated after your explicit consent.

6. Data Processing and Third Parties

Newsletter subscriptions are processed through Brevo (formerly Sendinblue), an EU-based email service provider that complies with GDPR. Brevo acts as a data processor on our behalf under a Data Processing Agreement (Art. 28 GDPR). Your email is stored securely on Brevo's EU servers and is not transferred outside the European Economic Area.

7. Data Retention

We retain your email address for as long as you are subscribed to our newsletter. You can unsubscribe at any time using the link in any email. Upon unsubscription, your data will be deleted from our systems within 30 days.

8. Your Rights Under GDPR

Under Articles 15–22 of the GDPR, you have the right to:

  • Access your personal data (Art. 15)
  • Rectify inaccurate data (Art. 16)
  • Erase your data — "right to be forgotten" (Art. 17)
  • Restrict processing of your data (Art. 18)
  • Data portability — receive your data in a machine-readable format (Art. 20)
  • Object to processing (Art. 21)
  • Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (Art. 7(3))

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For Spain, this is the Agencia Española de Protección de Datos (AEPD): www.aepd.es. You may also contact the supervisory authority in the EU Member State of your habitual residence or place of work.

10. Contact

For any privacy-related questions or requests, please contact our Data Protection team at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. If changes are significant, we will make reasonable efforts to notify you.