Privacy policy

1. Data controller

Purilia Sociedade Unipessoal Lda (VAT PT518000168), Av. da Liberdade 110, Lisbon, Portugal. Privacy contact: legal@nyxos.pt.

2. Purpose

Data submitted through the form is processed exclusively to manage the NYX OS by Purilia waitlist: recording interest, ordering early access and contacting you when access opens. We send no marketing beyond that contact, and we never share data with third parties for marketing.

3. Data collected

Name, email address, profile (independent professional or space/team) and city, together with the registration date and the consent given. No sensitive data is collected.

4. Legal basis and retention

Processing is based on consent, given through the form checkbox. Data is kept until the service launches or consent is withdrawn, whichever happens first.

5. Where data is stored

Data is stored in Supabase, on servers located in the European Union (Ireland). Internal notifications are sent through the Resend service.

6. Cookies

This site uses no third party cookies and no analytics or advertising tools. Only the technical mechanisms strictly necessary for the site to work are used and, if you pick a language in the footer selector, a functional cookie (nyx_lang) storing that preference only.

7. Your rights

Under the GDPR, you may at any time access, rectify, erase or request portability of your data, as well as withdraw consent and object to processing. To exercise these rights, write to legal@nyxos.pt. You also have the right to lodge a complaint with your supervisory authority.

8. Slot notice

On each professional's booking page, when no suitable time exists, you can ask to be notified if a slot opens up. This request is optional and depends on its own authorisation, separate from the booking consent.

Data processed: email, name, preferred service, preferred dates and time of day, and the language of the request. They serve solely to send a single notice when a suitable slot opens up. They never appear on public pages and are never shown to the professional: the notice is sent by the system.

The request expires automatically at the end of the requested period or of the deadline stated in the notice, at which point the contact is removed. The notice itself includes a link to withdraw the request at any time, with immediate removal of the contact. Records without contact details may be kept for up to 180 days, solely as statistics for the practice itself.