Privacy Policy
UserExpLab ("we", "us") is the data controller for personal information collected through this website and our design engagements. We process personal data lawfully, fairly, and transparently, in accordance with the General Data Protection Regulation (GDPR).
What we collect
When you contact us or commission work, we may collect your name, email address, phone number, company name, project details, and billing information. We also collect limited technical data such as IP address, browser type, and pages visited, via essential cookies and privacy-respecting analytics.
Why we process it
- · To respond to inquiries and prepare proposals (Art. 6(1)(b) GDPR — pre-contractual steps)
- · To deliver contracted design services and manage invoices (Art. 6(1)(b))
- · To improve our website and services through aggregated analytics (Art. 6(1)(f) — legitimate interest)
- · To comply with Spanish and EU tax and accounting obligations (Art. 6(1)(c))
Retention
Contact inquiries are kept for up to 24 months. Client project records and invoices are retained for the legally required 6 years under Spanish commercial law. You may request earlier deletion where no legal retention duty applies.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, as well as to object to processing based on legitimate interest. To exercise any right, write to [email protected]. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
Sub-processors & transfers
We rely on EU-hosted infrastructure providers for email, file storage, and invoicing. We do not sell personal data. Where any processor operates outside the EEA, we ensure appropriate safeguards such as Standard Contractual Clauses are in place.