This page explains what personal data peritumai.com collects, why, who processes it and what rights you have. We keep it short because we collect very little.
Last updated: 28 October 2026
Who is responsible
PeritumAI is run by Danilo Stojkovic, who is the controller of the personal data described here. For any privacy question or request, email danilo@peritumai.com.
The short version
- Analytics only if you accept. We use Google Analytics and Jetpack Stats to see which pages people read, but only after you accept them in our cookie banner. We show no ads and use no advertising cookies.
- Newsletter only with your consent. If you subscribe to the PeritumAI Briefing, we store your email address to send it. You can unsubscribe at any time.
- Never sold. We don’t sell or rent your data, and we don’t use it for anything you didn’t ask for.
What we collect and why
1. The PeritumAI Briefing (email newsletter)
What: your email address, the date and time you signed up and confirmed, and technical data our email provider records when you submit the form, such as your IP address. Our email provider may also record whether a briefing email was delivered, opened and which links were clicked, so we can keep the list healthy and improve the content.
Why and legal basis: to send you the briefing you asked for, based on your consent (Article 6(1)(a) GDPR). We use double opt-in: you’re only added to the list after you click the link in our confirmation email.
How long: until you unsubscribe or ask us to delete your data. If you never confirm your subscription, you won’t receive the briefing and the unconfirmed sign-up isn’t used.
Withdrawing consent: use the unsubscribe link in any briefing email, or email us. Withdrawing doesn’t affect anything done before you withdrew.
2. When you email us
What: your email address, name and anything you choose to include in your message.
Why and legal basis: to answer you and, if you ask about our services, to discuss a possible engagement. The legal basis is taking steps at your request before a contract (Article 6(1)(b) GDPR) or our legitimate interest in replying to messages (Article 6(1)(f) GDPR).
How long: as long as needed to handle your enquiry and any resulting work, and after that only as long as we have a legal or legitimate business reason to keep it.
3. Visiting the website
What: like almost every website, our web server automatically records technical data when you visit, such as your IP address, browser type, the page requested, and the date and time.
Why and legal basis: to deliver the website, keep it secure and investigate abuse, based on our legitimate interest in running a secure website (Article 6(1)(f) GDPR). We don’t use these logs to profile visitors.
How long: server logs are kept for a limited period by our hosting provider, in line with its retention policy, and then deleted.
4. Downloading a guide or white paper
What: when you download one of our PDFs, our website records which file was downloaded and the date and time, so we can count downloads. It doesn’t store your IP address or anything else that identifies you. To stop one click being counted twice, it also sets a short-lived cookie that expires after 60 seconds.
Why and legal basis: to see which research people find useful, based on our legitimate interest in improving our content (Article 6(1)(f) GDPR). The count stays on our own website and isn’t shared.
5. Analytics, only if you accept
When you first visit, a banner asks whether we may measure your visit. Nothing in this section happens unless you click Accept. If you click Reject or ignore the banner, these tools don’t load.
What, with Google Analytics: the pages you view, how you reached our site (for example from a search engine or a link), roughly where you are (country and city, worked out from your IP address), your device, browser, screen size and language, how long you stay, and actions such as downloads and clicks on links to other sites. Google Analytics recognises returning visitors with a random ID stored in two cookies. It doesn’t keep your IP address.
What, with Jetpack Stats: the pages you view, the page you came from, links you click to leave our site, your browser and device type, and your IP address, which Automattic uses to count visits and estimate your country. Jetpack Stats doesn’t set cookies.
Why and legal basis: to understand which pages and research are useful, so we can improve them. We only do this with your consent (Article 6(1)(a) GDPR, and the consent rules for cookies, such as the EU ePrivacy Directive and the UK’s PECR). We see the results as totals and trends, not as profiles of individual people.
How long: Google Analytics keeps detailed data for no more than 14 months, and its cookies expire after 2 years. Automattic keeps Jetpack Stats data in line with its own privacy policy.
Changing your mind: click Cookie settings (also at the bottom of every page) and choose again. If you withdraw consent, we delete the Google Analytics cookies from your browser and the tools stop loading. Your choice is remembered in your browser for 6 months, then we ask again.
Cookies
We show no ads and use no advertising cookies. Here is everything the website stores in your browser:
- Always (needed for the site to work)
pai-consentremembers your answer to the cookie banner for 6 months. It’s kept in your browser’s local storage and never sent to us.wp-dlm_cookieis set for 60 seconds when you download a PDF, so one click isn’t counted twice. The site’s administrator also gets login cookies, to keep that session secure. - Only if you accept analytics
_gaand_ga_1F95YEWZSYare Google Analytics cookies holding a random ID that recognises returning visitors. Both expire after 2 years, or when you withdraw consent.
To change your choice at any time, use Cookie settings.
Who processes your data for us
We use a small number of service providers, who process data on our behalf and under our instructions:
- Brevo (Sendinblue SAS, France): newsletter sign-up, list management and sending the briefing.
- Bluehost (Newfold Digital, United States): website hosting and server logs.
- Purelymail (United States): our email inbox, which holds messages you send us.
- Google (Google Ireland Limited, and Google LLC in the United States): Google Analytics, only if you accept analytics.
- Automattic (Automattic Inc., United States): Jetpack Stats, only if you accept analytics.
We may also disclose data if the law requires it, for example to comply with a court order.
International transfers
Some of our providers are based in, or use servers in, countries outside the European Economic Area, including the United States. Where that happens, transfers rely on the safeguards the GDPR allows, such as an adequacy decision (including the EU–US Data Privacy Framework where the provider participates) or the European Commission’s Standard Contractual Clauses in our providers’ data processing terms.
Your rights
Depending on where you live, and in particular under the GDPR, you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data deleted
- restrict or object to how we process it
- receive your data in a portable format
- withdraw your consent at any time
- complain to a data protection supervisory authority, for example in the country where you live or work
To use any of these rights, email danilo@peritumai.com. We’ll reply within one month. We may ask you to confirm your identity first, to protect your data.
Automated decisions
We don’t make decisions about you based solely on automated processing, and we don’t build profiles of individual visitors or subscribers.
Children
This website and the briefing are intended for professionals and are not directed at children under 16. We don’t knowingly collect their data.
Security
We collect as little as possible, use providers with appropriate security measures, serve the website over HTTPS and limit who can access personal data.
Changes to this policy
If we change how we handle personal data, we’ll update this page and the date at the top. If the change is significant, we’ll tell subscribers by email.