Privacy policy
In short: we only collect what you send us through the forms, use it to reply and, if you hire us, to run your project, never sell it, and delete it whenever you ask. We apply the GDPR to every visitor, the same regulation that protects you in Ireland.
Last updated:
Who is responsible
- Controller: PENDING
- Tax ID: PENDING
- Address: PENDING
- Privacy email: hola@scalia.agency
What data we process
Only what you give us when requesting the free audit or writing to us:
- Name and email.
- Your website address and what you'd like to achieve.
- Any message you choose to add (optional).
- Our communications with you.
We don't ask for sensitive data. Please don't include it in your message.
To make some examples on the site mention your city, we use the approximate city and country that our hosting provider infers from your connection. We don't store your IP address or that city: only your browser remembers it during your visit, and it isn't used to identify you.
Why we use it
- To analyse your business and send you the free audit and, if relevant, a quote.
- To send you a fixed project proposal, if you ask for one.
- To run the project, invoicing and the client relationship if you hire us.
We don't use your data for advertising, we don't sell it and we don't make automated decisions about you.
Legal basis
- Your consent, when you send the form (GDPR art. 6.1.a). You can withdraw it at any time.
- Steps taken at your request before a contract, when preparing a proposal (GDPR art. 6.1.b).
- Performance of the contract and legal obligations, such as tax rules, if you hire us (GDPR art. 6.1.b and 6.1.c).
How long we keep it
We keep your data for as long as needed to handle your request. If you hire us, for the duration of the contract and then for the legal retention and limitation periods. If you don't hire us and ask us to delete it, we delete it.
Who receives it
We don't share your data with third parties unless required by law. We rely on providers who process it on our behalf, under contract and with appropriate safeguards:
- Web hosting provider (Vercel Inc.).
- Transactional email provider (Resend).
Some of these providers may process data outside the European Economic Area. In that case the transfer relies on appropriate safeguards, such as the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.
Your rights
You can request access, correction, deletion, objection, restriction and portability, and withdraw your consent, by writing to hola@scalia.agency and stating which right you're exercising.
If you think we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es), our lead supervisory authority.
If you're in Ireland, you can also lodge a complaint with the Data Protection Commission (dataprotection.ie). As we're established in Spain, the Spanish Data Protection Agency (AEPD) is our lead supervisory authority, but you can always go to the authority where you live.
Security
We apply reasonable technical and organisational measures to protect your data: encrypted connections (HTTPS), restricted access and providers with security guarantees.
Also: Legal notice · Cookies · Accessibility