Compliance Division

Legal Documentation

Complete regulatory compliance framework for WriteBrandVoice.

Sections
01

Privacy Policy

1. Data Controller

WriteBrandVoice (hereinafter referred to as "the Controller"), located at Calle de las Tiendas 4, 04001 Almería, Spain, is the data controller responsible for the processing of personal data collected through this website and associated services. Contact: [email protected].

2. Data We Collect

We collect the following categories of personal data when you interact with our services:

  • Contact information: name, email address, phone number
  • Project specifications: technical requirements, business objectives, budget parameters
  • Communication records: messages, emails, and support interactions
  • Technical data: IP address, browser type, operating system, referring URLs
  • Payment information: processed through Stripe and never stored on our servers

3. Purpose of Processing

Personal data is processed for the following purposes:

  • Execution of web development and automation service contracts
  • Communication regarding project status, deliverables, and technical support
  • Compliance with legal obligations under Spanish and EU law
  • Improvement of our services through aggregated, anonymized analytics
  • Sending of service-related communications (not marketing, unless consented)

4. Legal Basis for Processing

We process personal data under the following legal bases as defined by the General Data Protection Regulation (EU) 2016/679:

  • Article 6(1)(a) — Consent: when you voluntarily submit contact forms
  • Article 6(1)(b) — Contract performance: when processing is necessary for service delivery
  • Article 6(1)(c) — Legal obligation: for tax, invoicing, and regulatory compliance
  • Article 6(1)(f) — Legitimate interests: for security, fraud prevention, and service improvement

5. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected. Project-related data is retained for a period of 24 months following the completion of the last active contract. Financial records are retained for 5 years in accordance with Spanish tax law. Upon expiration of the retention period, data is securely deleted or irreversibly anonymized.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Article 15): obtain confirmation and copies of your data
  • Right to rectification (Article 16): correct inaccurate or incomplete data
  • Right to erasure (Article 17): request deletion of your personal data
  • Right to restriction (Article 18): limit processing under specific conditions
  • Right to data portability (Article 20): receive your data in a structured format
  • Right to object (Article 21): object to processing based on legitimate interests

To exercise any of these rights, contact us at [email protected] with subject line "GDPR Request".

7. International Transfers

WriteBrandVoice operates primarily within the European Economic Area (EEA). Where data transfers occur outside the EEA, we ensure adequate protection through Standard Contractual Clauses (SCCs) or adequacy decisions as recognized by the European Commission.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS 1.3), encryption at rest, access controls, and regular security audits. In the event of a data breach that poses a high risk to your rights, we will notify you and the relevant supervisory authority within 72 hours as required by Article 33 of the GDPR.

9. Supervisory Authority

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) at www.aepd.es.