Privacy policy
Last updated: June 2026
---
## Who we are
Knife & Compass is a global culinary consulting agency. We work with independent restaurant operators, café owners, and food-and-beverage businesses to sharpen menus, tighten operations, and build financial clarity.
Operating name: Knife & Compass
Website: knifeandcompass.eu
Contact: hello@knifeandcompass.eu
Based in: Lisbon, Portugal (European Union)
Because we are based in the EU, this policy is written in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679). If you have questions about how we handle your data, write to us at the address above.
---
## What information we collect
We collect information in two ways: what you give us directly, and what is collected automatically when you visit our site.
Information you give us directly
When you fill out a contact or inquiry form, book a consultation, or send us an email, you may provide:
- Your name
- Your email address
- Your phone number
- The name and type of your business
- Any other details you choose to share in a message
We collect only what you choose to give us. We do not ask for more than we need.
Information collected automatically
When you visit knifeandcompass.eu, basic technical data is collected automatically by our hosting platform (Squarespace) and any analytics or cookie tools active on the site. This may include:
- Your IP address (typically anonymised)
- Browser type and version
- Device type
- Pages visited and time spent on each
- Referring URL (the page you came from)
- Date and time of your visit
See the Cookie Policy below for more detail on how this works.
---
## Why we collect it and our legal basis
We collect and use your information for specific, defined purposes. Under GDPR, we are required to have a lawful basis for each one.
| Purpose | Lawful basis |
|---|---|
| Responding to your inquiry or consultation request | Legitimate interest / pre-contractual steps |
| Delivering consulting services if you become a partner | Performance of a contract |
| Sending occasional updates or content you have opted into | Consent |
| Improving the website based on usage patterns | Legitimate interest |
| Complying with legal obligations | Legal obligation |
We do not use your information for automated decision-making or profiling.
---
## How long we keep your data
We keep your data only as long as it is necessary for the purpose it was collected.
- Inquiry and contact data: up to 24 months from last contact, unless a consulting engagement follows.
- Engagement and project data: up to seven years, to comply with standard financial and legal record-keeping requirements.
- Marketing and newsletter data: until you withdraw consent.
- Website analytics data: as configured by our analytics provider, typically 14–26 months.
When data is no longer needed, we delete or anonymise it.
---
## Who we share your data with
We do not sell your personal data. We do not share it with third parties for their own marketing purposes.
We may share data with a small number of trusted service providers who help us operate the business — for example, our website hosting platform, email service, or scheduling tool. These providers act as data processors on our behalf and are contractually bound to handle your data securely and only for the purposes we define.
Where any provider is based outside the EU, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) as required by GDPR.
---
## Your rights
Under GDPR, you have the following rights regarding your personal data:
- Access — you can ask us what data we hold about you.
- Correction — you can ask us to correct inaccurate data.
- Erasure — you can ask us to delete your data, subject to any legal obligations that require us to retain it.
- Restriction — you can ask us to limit how we use your data while a concern is being resolved.
- Portability — you can ask for your data in a structured, machine-readable format.
- Objection — you can object to processing based on legitimate interest.
- Withdraw consent — if processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, write to us at hello@knifeandcompass.eu. We will respond within 30 days.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at cnpd.pt.
---
## Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. No method of transmission over the internet is completely secure, but we take this obligation seriously.
---
## Changes to this policy
We may update this policy from time to time — for example, if we add new services or tools. The date at the top of this page reflects when it was last revised. Material changes will be noted clearly.