Privacy Policy

1. Who is responsible for your data?

The data controller is Global Pendex / Pendex. For privacy questions or requests, contact us at [email protected].

Before publishing this policy, the operator should add its full legal name and postal address here. EU data protection law requires users to be told who the controller is and how to contact it.

2. What data do we process?

When you enter a measurement, it is used in your browser to calculate a comparison. The measurement is not submitted to Pendex, stored on our servers, or shared by Pendex. Because a measurement may relate to sexual health or body image, we treat it as sensitive in nature and design the tool so Pendex does not receive it.

We also process the consent preference stored in your browser, and analytics data only when you choose to accept analytics cookies. Analytics may include page views, device and browser information, approximate location, and an online identifier generated by Google Analytics.

3. Why do we process data?

• Website operation: remembering your unit and consent choices. This is based on our legitimate interest in providing a functional service and, where required, the strictly necessary exception under ePrivacy rules.
• Analytics: understanding aggregate website use and improving the service. This is based on your consent, which you can refuse or withdraw at any time.
• Enquiries: responding to messages you send us. This is based on our legitimate interest in handling the request and taking steps at your request.

4. Cookies and similar storage

Pendex uses browser local storage for essential preferences, including your unit choice and analytics consent choice. We do not use non-essential analytics storage until you accept. Under the EU ePrivacy Directive and applicable national laws, consent is requested before non-essential analytics storage is used.

You can withdraw analytics consent below. Withdrawal does not affect processing that occurred before withdrawal. You can also clear site data in your browser settings.

5. Google Analytics

If you accept analytics, Google Analytics is loaded from Google and may process usage data as our processor or, depending on the service configuration and applicable law, as a separate controller. Google may process data outside the European Economic Area, including in the United States, using its applicable transfer safeguards. Review Google's privacy information at Google Privacy & Terms.

Pendex does not use the measurement entered into the comparison tool as an analytics event.

When you use a result-sharing button after accepting analytics cookies, Pendex records an aggregate result_share event with the selected platform, country page, and result page. The measurement and percentile are not included in this event. Sharing remains available if you decline analytics cookies.

6. Who receives data?

We do not sell personal data. Data may be received by hosting, security, email, and analytics providers where necessary to operate the service. Providers are required to process data under appropriate contractual and security arrangements. Public country statistics and outbound source links are not personal data about you.

7. How long do we keep data?

Measurements entered into the comparison tool are not retained by Pendex. Consent preferences remain in your browser until you clear them or change your choice. Enquiry correspondence is retained only as long as reasonably necessary to handle the request and meet legal obligations. Analytics retention follows the configuration selected in the Google Analytics property and should be documented by the operator before publication.

8. Your rights

Depending on your circumstances, you may have the right to access, correct, erase, restrict, or object to processing of your personal data; to receive data you provided in a portable format; and to withdraw consent at any time. You also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. Pendex does not make such decisions.

To exercise a right, email [email protected]. We may need to verify your identity and will normally respond within one month, subject to lawful extensions for complex requests.

You may also complain to the data protection supervisory authority in the EU/EEA country where you live, work, or believe an infringement occurred. The relevant authority for the controller should be identified once the operator's establishment is confirmed.

9. Children

The service is intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us so we can take appropriate action.

10. Security and changes

We use reasonable technical and organisational measures to protect information processed through the service. No internet transmission is completely secure. We may update this policy when our processing changes; the date above identifies the latest version.

11. Privacy requests

For privacy questions, data requests, or corrections, email us at [email protected].