Privacy policy

1. Controller and information collected

The controller is the provider identified below. Enquiries may contain your name, Telegram username, contact details, business request and correspondence. If a contract is concluded, billing and project information needed to perform it is also processed.

This website has no contact form, visitor account, analytics or advertising tracker. Hosting may process IP addresses and technical logs. Please do not send sensitive personal information, student records or passwords in an initial enquiry.

A usable contact and sufficient details of the request are needed to reply. Contract and billing information required by the agreement or law must be provided to conclude and perform the contract and issue a compliant invoice; without it, those steps cannot be completed. Other information is voluntary unless its necessity is explained. This website does not carry out automated decision-making or profiling.

2. Purposes and legal bases

Information is used to answer a request and prepare a proposal at your initiative, and to perform an agreed contract. Billing and other records are kept where legal obligations apply. Necessary security processing may rely on a documented legitimate interest after assessing the impact on individuals.

Unrelated marketing requires its own lawful basis and, where required, separate consent. Acceptance of this privacy notice is not treated as blanket consent.

3. Recipients and international transfers

Authorised service providers may process information under appropriate contracts and access controls; authorities may receive it when required by law. International transfers require an applicable lawful mechanism and information about safeguards.

Telegram is an external platform with its own privacy policy. Its processing is described at https://telegram.org/privacy. A link to Telegram does not mean that all of its processing is controlled by the consultant.

Where an international transfer applies, you can request information or an available copy of its safeguards from the privacy contact below.

4. Retention and rights

Enquiry data is retained only as needed to handle the request. Contract and invoice information is retained for the applicable legal duties and limitation periods, then deleted or restricted as required.

You can request access, rectification, erasure, restriction, portability where applicable, or object to processing, and withdraw consent without affecting prior lawful processing. Send requests to the privacy email below; identity checks must be proportionate. Responses are generally due within one month, with a lawful extension explained where applicable. You may complain to the Agencia Española de Protección de Datos at https://www.aepd.es.

5. Client data during a project

If a project requires access to a client’s CRM, employee or student data on the client’s behalf, roles, confidentiality, security and an Article 28 GDPR processor agreement must be settled before access. An initial consultation does not authorise unrestricted access or reuse of client data.