Privacy Policy
How personal data submitted through this site is collected, used and protected. Aligned with the EU General Data Protection Regulation (GDPR).
Last updated: 2026. This document is a professional draft. It should be reviewed by qualified legal counsel before being used as a binding privacy notice.
1. Data controller
The data controller responsible for personal data collected through this website is Iván Arenillas (IArenillas), based in Madrid, Spain. For any privacy-related question or request, you can write to inaren2012@gmail.com.
2. Data collected through the contact form
When you submit the contact form, the following information is collected:
- Name
- Company
- Work email
- Project type
- Urgency
- Project brief / message
- Technical metadata (user agent, submission timestamp)
3. Purpose of processing
The information is used solely to:
- Reply to your enquiry.
- Evaluate fit for a potential engagement.
- Maintain a record of professional correspondence for the duration of the relationship.
Personal data is not used for marketing automation, profiling or advertising. There is no email newsletter sent from this form.
4. Legal basis
The legal basis for processing is your consent (Art. 6.1.a GDPR), provided by submitting the form, and the legitimate interest in answering professional enquiries (Art. 6.1.f GDPR).
5. Data storage
Lead submissions are stored on Lovable Cloud (Supabase infrastructure) with row-level security. Access is restricted to the data controller. Data is processed within the European Economic Area where possible, and any cross-border transfers rely on adequate safeguards as defined by the GDPR.
6. No sale of personal data
Your personal data is never sold, rented or shared with third parties for their own marketing purposes.
7. Data retention
Lead submissions are retained for as long as needed to manage the enquiry and any resulting professional relationship, typically up to 24 months after the last interaction. After that, the data is deleted or anonymized unless a longer retention period is required by law.
8. Your rights
Under the GDPR you have the right to:
- Access the personal data held about you.
- Request correction of inaccurate data.
- Request erasure of your data.
- Restrict or object to processing.
- Request data portability.
- Withdraw consent at any time.
- Lodge a complaint with the Spanish Data Protection Agency (AEPD).
To exercise any of these rights, write to inaren2012@gmail.com.
9. Cookies and analytics
This site does not currently set advertising or third-party tracking cookies. Essential technical cookies may be used by the underlying platform to ensure the site works correctly. Should analytics or measurement tools be added in the future, this section will be updated and a cookie banner will be shown where required.
10. Applicable law
This privacy policy is governed by the laws of Spain and the applicable EU regulations, including the General Data Protection Regulation (Regulation (EU) 2016/679) and Spain's Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights.
11. Updates
This policy may be updated to reflect changes in services, infrastructure or applicable law. The latest version is always available on this page.