Privacy policy
Last updated: 3 October 2026
Data controller
Miguel Recio Alfonso
Tax ID (NIF): 71014004D
Address: Santa Elena 3, bajo, 49007 Zamora, Spain
Email: [email protected]
What data I process
- Forms (quote request, questions about the audit and the audit questionnaire): name, email, website, sector, plan, indicative budget and whatever you write.
- Buying the audit: name, email and billing details. Payment is handled by Stripe; I never see or store your card details.
- Booking a call: name, email and the chosen time, through Cal.com.
- Browsing: aggregated visit statistics without cookies (Cloudflare Web Analytics) and the technical logs the hosting keeps for security, such as the IP address.
Why I use it and on what legal basis
- Answering your messages and preparing a quote: your consent when you send a form and, when you ask for it, steps taken before a contract.
- Carrying out the audit or the project you hire me for: performance of the contract.
- Issuing invoices and keeping the books: compliance with tax and commercial legal obligations.
- Keeping the site secure and knowing how many visits it gets: my legitimate interest, with aggregated data that does not identify you.
What I do not do
I do not build profiles, make automated decisions or send you marketing emails you have not asked for.
Required data
The fields marked as required in each form are needed to handle your request. If you leave them empty, I will not be able to reply.
How long I keep it
- Messages and quotes that do not lead to a contract: up to one year after the last contact.
- Client data: for as long as we work together and then for the time needed to handle any possible liabilities.
- Invoices and payment records: six years, as required by Spanish commercial and tax law.
Who I share it with
I do not sell or share your data. To provide my services I rely on providers that process it on my behalf and only for that purpose: Cloudflare (website hosting and cookieless visit statistics), Resend (delivery of form messages by email), Apple iCloud (the mailbox where I receive and answer those messages), Stripe (card payments), Cal.com (call bookings) and my tax advisor (accounting and taxes).
Invoices are also reported to the Spanish Tax Agency when the law requires it.
International transfers
Some of these providers are based in the United States or may process data outside the European Economic Area. When they do, it is under the safeguards required by the GDPR: the EU-US Data Privacy Framework or the Standard Contractual Clauses approved by the European Commission.
Your rights
You can ask me for access to your data, its correction or deletion, object to its processing, request its restriction or portability and withdraw any consent you have given at any time, without affecting what was processed before. Write to [email protected] saying which right you want to exercise; if I have doubts about your identity, I may ask you to confirm it.
If you believe I have not handled your request properly, you can file a complaint with the Spanish Data Protection Agency (aepd.es) or the authority of your country.
Children
This site is not aimed at children under 14. If you are under that age, please do not send me your data.
Security
The site always runs over an encrypted connection (HTTPS), and only I and the providers listed above access your data, as far as needed to provide the service.
Changes to this policy
If I change the way I handle your data, I will update this page and the date above.