Privacy policy.
Who we are
Night Engines is the trading name of Michael Angeles, Athens, Greece. Michael is the controller of the personal data described here: he decides why and how it is used. There is no separate data protection officer; questions go straight to him at michael.angeles@nightengines.com.
This policy covers nightengines.com and the conversations that start from it. Client projects run under their own written agreement.
The short version
- No analytics, no advertising, no tracking pixels, no newsletter.
- We hold what you choose to send: your emails and, if you book a call, your booking details.
- The site's fonts and code are served from our own domain. The booking calendar (Calendly) is the one third-party service, and it loads only if you allow it.
- We never sell or rent your data, and we don't use it for profiling or automated decisions.
What we collect, why, and on what legal basis
When you email us
Your name, email address, and whatever you write, including details about your business. We use it to reply, to scope and quote work you ask about, and to keep a record of the conversation. Basis: steps you ask us to take before a possible contract (GDPR art. 6(1)(b)), and our legitimate interest in answering business enquiries (art. 6(1)(f)).
When you book a call
The booking page asks for your name, email address, the time you pick, and any answers you give to the booking questions. Calendly collects these for us and sends us a notification. We use them to hold the meeting and prepare for it. Basis: steps before a possible contract (art. 6(1)(b)). The calendar only loads after you agree to Calendly's cookies (art. 6(1)(a), see Cookies). If you'd rather not, email us and we'll find a time by hand.
When you visit the site
The site is hosted on GitHub Pages. When you visit, GitHub logs your IP address for security purposes, whether or not you have a GitHub account. We don't receive or use these logs. Basis: our legitimate interest in running a secure website (art. 6(1)(f)).
The site also keeps your cookie choice in your browser's local storage, under the key ne-consent. It never leaves your device.
Who else handles your data
We use a small number of service providers. Each one handles data only to provide its service:
| Provider | What for | Where |
|---|---|---|
| Google (Google Workspace) | Our business email | EU and US |
| Calendly, LLC | Booking calendar and meeting scheduling; Calendly acts as our processor | US |
| GitHub, Inc. | Website hosting (GitHub Pages) | US |
We may also disclose data if the law requires it, for example to a court or to the tax authority, or to our accountant or lawyer under a duty of confidentiality.
Transfers outside the EU
Google, Calendly and GitHub are based in the United States. Each is certified under the EU–U.S. Data Privacy Framework, which the European Commission has found gives an adequate level of protection (GDPR art. 45). Where a transfer isn't covered by the framework, the provider's Standard Contractual Clauses apply.
How long we keep it
- Emails that don't lead to work: deleted within 24 months of our last exchange.
- Calendly bookings: removed from Calendly within 12 months of the meeting.
- Clients: records needed for invoicing and tax are kept as long as Greek tax and accounting law requires. Everything else is kept for the length of the engagement, plus 24 months.
- Your cookie choice: stays in your browser until you clear it or change it.
Your rights
Under the GDPR you can ask us to:
- give you a copy of the data we hold about you
- correct it
- delete it
- restrict how we use it
- send it to you or another provider in a portable format
You can also object to any use based on legitimate interest, and withdraw consent at any time. For cookies, use Cookie settings in the footer. Withdrawing consent doesn't affect anything done before you withdrew it.
To use any of these rights, email michael.angeles@nightengines.com. We'll answer within one month. If you think we've handled your data wrongly, you can complain to the Hellenic Data Protection Authority (dpa.gr) or to the authority where you live. We'd appreciate the chance to fix it first.
Cookies
The site sets no cookies of its own. The booking calendar on the Book a call page is provided by Calendly, which sets its own cookies and loads its own analytics and marketing tools (for example Google Analytics and the Meta pixel). It loads only after you click Accept (or Allow Calendly). If you reject, nothing loads and no cookies are set. The full list is on our Cookie notice.
Security
Email and booking data sit with the providers above, behind their security and the access controls on our accounts. No system is perfectly secure. If a breach puts your data at risk, we'll tell you and the regulator as the GDPR requires.
Children
The site is for businesses. It isn't directed at children, and we don't knowingly collect data from anyone under 16.
Changes
If we change how we handle data, we'll update this page and the date at the top. If a change is significant and we have your email from an ongoing conversation, we'll tell you directly.
Adapted from a template prepared and made publicly available by General Legal, PC ("General Legal"). It is provided for general reference purposes only and does not constitute, and should not be construed as, legal advice, or an endorsement or review of any particular transaction in which it is used. Use of this template does not create an attorney-client relationship with General Legal. General Legal has not reviewed, and takes no position on, any modifications made to this document.