GDPR. Plainly written.

JoinBeUs takes data protection seriously. We have designed this marketing site to collect only the minimum personal data needed to operate, to retain it only as long as necessary, and to give you straightforward control over it.

The data controller for personal data collected through this site is JoinBeUs Lda, registered at Rua de Santa Catarina 12, 1200 Lisbon, Portugal. You can contact us at privacy@joinbeus.com.

We rely on the following lawful bases under Art. 6(1) GDPR:

• Consent (Art. 6(1)(a)) — for adding you to our launch-notification list when you submit the waitlist form. You can withdraw consent at any time.
• Legitimate interests (Art. 6(1)(f)) — for responding to institutional demo requests, for maintaining site security, and for preventing fraud. We have balanced these interests against your rights and determined that they do not override them.
• Legal obligation (Art. 6(1)(c)) — where we are required by law (e.g. to respond to a lawful request from a competent authority).

We do not process any special-category data through this site.

Under GDPR (Articles 15–22) and the UK Data Protection Act 2018 you have the right to:

• Access — obtain a copy of the personal data we hold about you;
• Rectification — correct inaccurate or incomplete data;
• Erasure — request deletion of your data (the "right to be forgotten");
• Restriction — ask us to restrict processing in defined circumstances;
• Portability — receive your data in a structured, machine-readable format;
• Object — object to processing based on legitimate interests;
• Withdraw consent — at any time, without affecting prior lawful processing.

We do not carry out solely automated decision-making with legal or similarly significant effects through this site.

Email privacy@joinbeus.com with the words "Data subject request" in the subject line and a short description of what you want. We may ask for additional information to verify your identity. We respond within 30 days, extendable by 60 days for complex requests (Art. 12(3) GDPR), and we will not charge a fee except where requests are manifestly unfounded or excessive.

We have data processing agreements in place with:

• Formspree — waitlist form submission
• Cal.com — booking and scheduling for institutional demos
• The hosting provider serving this site (see "International transfers" below)

See our Privacy Policy for more detail on each.

Where personal data is transferred outside the EEA or UK (for example, to processors in the United States), transfers are covered by the appropriate safeguards under Chapter V GDPR — typically the European Commission's Standard Contractual Clauses and, where applicable, adequacy decisions such as the EU–US Data Privacy Framework.

In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it (Art. 33 GDPR) and, where the risk is high, we will notify affected individuals without undue delay (Art. 34 GDPR).