Privacy Policy

1. Data controller

[Razón social de Hey Paul Agency], [NIF / número de registro], [Dirección de la entidad]. Contact: pablo@heypaul.agency.

2. What data we collect and why

• Contact form: name, email, service of interest and message. Purpose: responding to your enquiry and managing a potential business relationship. Legal basis: pre-contractual measures at your request (art. 6.1.b GDPR).
• Analytics: we use Plausible Analytics, a cookieless tool that does not collect personal data or track you across sites.

3. Retention

Enquiry data is kept for as long as needed to handle your request and, at most, for two years without activity, unless a contractual relationship arises or a legal obligation requires longer retention.

4. Recipients

We do not sell your data. Service providers that process data on our behalf: hosting (Vercel), transactional email (Resend / Amazon SES, EU region) and database (Supabase). Some providers may process data outside the EEA under appropriate safeguards (standard contractual clauses).

5. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to pablo@heypaul.agency. You may also lodge a complaint with your supervisory authority (in Spain, the AEPD; in Estonia, the AKI).