Privacy policy
What personal data estudio MY handles, why, for how long, and what rights you have (GDPR and Spanish LOPDGDD).
Last updated: 23 October 2026.
Data controller
estudio MY, sole trader (NIE Y7203322N), Travesia Canaders, 9, 17002 Girona (Spain). Email: [email protected]. Phone: +34 653 082 056.
What data we handle and why
- Enquiries and quotes. If you write to us on WhatsApp or by email, we handle the data you give us (name, contact details, message) to reply and, where relevant, prepare a quote. Legal basis: taking pre-contractual steps at your request (Art. 6.1.b GDPR) and your consent when you write to us (Art. 6.1.a). The contact form on this site sends nothing to our servers: it only opens WhatsApp with a prepared message, which you choose whether to send.
- Clients. If we work together, we handle the data needed to provide the service, to invoice, and to meet legal, tax and accounting obligations (Art. 6.1.b and 6.1.c GDPR).
- Visit statistics. We measure visits with Cloudflare Web Analytics, which uses no cookies or device storage and builds no individual profiles; it only gives aggregate figures (page views, country, device type). Legal basis: our legitimate interest in understanding how the site is used (Art. 6.1.f GDPR).
- Plan editor. Everything you draw is processed in your browser. It is not sent to or stored on our servers.
Retention
Enquiries that do not become a project are kept for up to 12 months after the last message. Client data is kept for the duration of the contract and afterwards for the periods the law requires (generally six years for tax and accounting).
Recipients and processors
We do not sell or pass on your data. These providers are involved in running the service:
- Cloudflare, Inc. (USA): site hosting and aggregate statistics. It operates under standard contractual clauses and the EU-US Data Privacy Framework.
- Meta Platforms (WhatsApp) and Google (Gmail): only when you write to us through those channels, under their own terms.
- Public authorities, where the law requires it.
The demonstration pages (/demos/) load fonts from Google Fonts and a library from jsDelivr; when you open them your IP address reaches those providers. These pages are not indexed and collect no data.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [email protected] and saying which right you are exercising. You may withdraw consent at any time. If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Children
This site is aimed at professionals and companies, not at children under 14.
Changes
If we change this policy we will update the date above. For more on browser storage see the Cookie policy and the Legal notice.