Privacy Policy

This policy explains how CraftedWebSpace (“we”, “us”) collects, uses and protects the personal information you provide through this website. We’re committed to handling your data lawfully, transparently, and only for the purposes set out here.

Who we are

CraftedWebSpace is a web design studio based in Spain, operating within the EU. We are the “data controller” for the information described below. For any privacy question, contact us at [email protected].

What we collect

• Enquiries. When you use our contact form, we collect the name, email address, phone number (if you give one) and the message you send.
• Newsletter. If you subscribe, we collect your email address.
• Technical data. Our hosting provider records limited technical information (such as IP address and browser type) to keep the site secure and running.

Why we use it, and our legal basis

• To respond to your enquiry — our legitimate interest, and steps taken at your request.
• To send the newsletter — your consent, which you can withdraw at any time.
• To keep the site secure and working — our legitimate interest.

We do not sell your data, and we do not use it for automated decision-making or profiling.

Who we share it with

We use a small number of trusted service providers (“processors”) who handle data on our behalf and only on our instructions:

• Supabase — secure database hosting for enquiries and subscribers.
• Resend — sends us an email notification when you get in touch.
• Cloudflare — website hosting, content delivery and privacy-friendly analytics.
• Google (Google Workspace) — our business email, through which we receive and reply to your enquiry.

International transfers

Some providers may process data outside your country. Where they do, appropriate safeguards (such as the EU Standard Contractual Clauses) are in place.

How long we keep it

We keep enquiry data for as long as we’re in contact about your project and for up to 24 months after our last contact, then delete it. Newsletter data is kept until you unsubscribe.

Your rights

Under the GDPR you have the right to access your data; to have it corrected or erased; to restrict or object to its use; to data portability; and to withdraw consent at any time. To exercise any of these, email [email protected]. You also have the right to complain to your data protection authority — in Spain, the Agencia Española de Protección de Datos (AEPD).

Cookies

For how this site uses cookies, see our Cookie Policy.

Security

Your data is protected with access controls, encryption in transit, and validated inputs. No system is perfectly secure, but we take reasonable measures to keep your information safe.

Changes to this policy

We may update this policy from time to time; the date at the top shows the latest version.

Contact

CraftedWebSpace — [email protected].