Privacy Policy — designfounding

1. Who we are

This Privacy Policy explains how designfounding, S.L. ("designfounding," "we," "us") collects, uses and protects personal data when you visit designfounding.com, submit the contact form, or place an order. The data controller is designfounding, S.L., NIF B12345678, registered at Carrer de Dolça de Provença, 4, Sant Martí, 08020 Barcelona, Spain. You can reach us at support@designfounding.com or +34 611 21 13 46.

2. What data we collect

Depending on how you interact with the site, we collect: name, email address, phone number and postal address (contact form and checkout); company name, VAT/NIF, and project notes you choose to share; order details (packages selected, prices, payment option chosen — not your card number, which goes directly to our payment processor and is never stored on our servers); and, only after you give analytics consent, usage data collected by Google Analytics 4 (pages visited, approximate location, device type).

3. Why we collect it, and our legal basis

We process contact-form and checkout data to respond to your enquiry or fulfil your order — this is necessary for pre-contractual steps and contract performance (Art. 6(1)(b) GDPR). We process invoicing data to meet our Spanish tax and commercial-record obligations (Art. 6(1)(c) GDPR, legal obligation). We process analytics data only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via "Cookie settings" in the footer.

4. How long we keep it

Enquiry data that doesn't become an order is kept for 24 months from your last contact, then deleted. Order and invoicing data is kept for the periods Spanish commercial and tax law require — generally 6 years from the end of the relevant fiscal year (Código de Comercio, Art. 30). Analytics data is retained according to Google Analytics 4's own retention settings, currently 14 months.

5. Who we share it with

We share data with: our payment processor, to process checkout payments (they receive payment details directly; we do not); Google, as our analytics processor, only after consent; and Spanish tax authorities, where legally required. We do not sell personal data, and we do not share it with anyone for their own marketing purposes.

6. Your rights

Under the GDPR and the Spanish LOPDGDD, you can request access to, rectification of, erasure of, restriction of, or portability of your data, and you can object to processing based on legitimate interest. To exercise any of these, email support@designfounding.com. If you believe your rights haven't been respected, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD, www.aepd.es).

7. Cookies & analytics

See the separate Cookie Policy for the full list of cookies and similar technologies used on this site, and how to manage your consent.

8. International transfers

Google Analytics may process data on servers outside the European Economic Area. Where this happens, it is covered by the European Commission's Standard Contractual Clauses, as required for any transfer outside the EEA.

9. Changes to this policy

We may update this policy as the site or our processing activities change. The date at the top of this page shows when it was last revised; material changes will be highlighted here.

10. Contact & complaints

For any question about this policy or your data, contact support@designfounding.com. You may also contact the AEPD directly for complaints regarding the processing of your personal data.