Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. Data We Collect

We may collect the following categories of personal data when you interact with our website or services:

• Contact information: name, email address, phone number
• Project information: descriptions, requirements, and notes you provide
• Order information: service requested, order reference numbers
• Technical data: IP address, browser type, pages visited (via cookies)
• Communication records: emails and messages exchanged with us

3. Legal Basis and Purpose of Processing

We process your personal data on the following legal bases under the GDPR:

• Contract performance (Art. 6(1)(b)): to process your order, communicate about your project, and deliver our services
• Legitimate interests (Art. 6(1)(f)): to improve our services, prevent fraud, and maintain security
• Legal obligation (Art. 6(1)(c)): to comply with applicable laws and regulations
• Consent (Art. 6(1)(a)): for optional communications such as newsletters, where you have opted in

4. How We Use Your Data

Your personal data is used to:

• Process and confirm your orders and service requests
• Communicate with you about your project
• Provide technical support and respond to enquiries
• Comply with legal and regulatory obligations
• Improve our website and services

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. In general:

• Client and project data: retained for 5 years after the end of the engagement
• Support enquiries: retained for 2 years
• Technical/cookie data: retained for up to 12 months

6. Data Sharing

We do not sell your personal data. We may share your data with trusted third-party service providers who assist us in operating our website and delivering our services (e.g. cloud hosting providers, communication tools). All third parties are required to handle your data in accordance with applicable data protection laws and our instructions.

We may also disclose your data where required by law or to protect our legal rights.

7. Cookies

Our website uses cookies to improve your browsing experience and analyse site traffic. Cookies are small text files stored on your device. You can control cookie settings through your browser. Disabling cookies may affect the functionality of certain parts of our website.

8. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate data
• Right to erasure: to request deletion of your data ("right to be forgotten")
• Right to restriction: to request that we limit how we use your data
• Right to data portability: to receive your data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interests
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — AEPD) at www.aepd.es.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be published on this page. We encourage you to review this policy periodically.