Privacy Policy

This Privacy Policy explains what personal data ClarroxWeb collects when you visit clarroxweb.com or get in touch, why we collect it, who we share it with, and the rights you have. We collect only what we need and tell you plainly what happens to it.

1. Who we are (data controller)

For any question about this policy or to exercise your rights, email us at info@clarroxweb.com. Given our size we are not required to appoint a Data Protection Officer; the data controller named above handles all data protection matters directly.

2. What personal data we collect

• Contact form: your name, email address, the service you are interested in, your budget range, and your message. The form works through your own email program: when you press “Send inquiry”, a pre-filled email opens in your mail app, and your data reaches us only when you send that email. We do not store form data on a server ourselves.
• Newsletter sign-up: your email address, sent to us by email in the same way. Until our newsletter launches, we store your address only so we can invite you once it exists; you can withdraw at any time.
• Booking a call: when you schedule a call through our booking link, our booking provider (Cal.com) collects your name, email address, chosen time, and anything else you add to the booking form. Cal.com is only contacted when you click the booking link.
• Job applications: if you apply by email, we receive the data you send us (such as your CV and portfolio). We use it only for the application process (see sections 3 and 7).
• Technical data: our hosting provider (Vercel) keeps short-lived server logs (including IP addresses) for security and reliability.
• Analytics: if you accept analytics cookies, Google Analytics collects aggregated statistics about your visit, such as pages viewed and time on site. It stays switched off until you consent (see section 6).
• Preferences: your cookie choice and language preference are stored in your browser's local storage. They stay on your device and are not sent to any third party.

We do not ask for special-category data (such as health, religion, or political views). Please do not include it in your messages.

3. Why we use your data and our legal basis

Purpose	Legal basis
Reply to your inquiries and prepare quotes	Steps taken at your request before entering a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding (Art. 6(1)(f))
Schedule and hold calls you book	Steps taken at your request before a contract (Art. 6(1)(b))
Handle job applications	Steps taken at your request before entering a contract (Art. 6(1)(b))
Send our newsletter once it launches	Your consent (Art. 6(1)(a)), withdrawable at any time
Measure and improve website traffic (Google Analytics)	Your consent (Art. 6(1)(a))
Keep the site secure, available, and free of abuse	Our legitimate interest in security (Art. 6(1)(f))
Meet legal, tax, and accounting duties for client work	Compliance with a legal obligation (Art. 6(1)(c))

Where we rely on legitimate interest, we have weighed it against your rights and freedoms. You can object at any time (see section 8).

4. Who we share your data with

We do not sell or rent your personal data. We share it only with the service providers that help us run the site and respond to you, each acting on our instructions:

• Vercel: hosts and serves the website and keeps short-lived server logs, including IP addresses, for security and reliability. A US-based provider serving from global edge locations.
• Cal.com: powers our booking page and collects the details you enter when scheduling a call. Processes data in the United States.
• Google (Google Ireland / Google LLC): provides Google Analytics, which runs only after your consent, and — on some project pages — YouTube videos in privacy-enhanced mode, which can receive your IP address when the video loads. All fonts, scripts and other assets are served from our own site — simply visiting our pages does not send requests to Google.
• Google Workspace: our email provider; the inquiries you send us arrive and are stored in our mailbox.

We may also disclose personal data where the law requires it, or to establish, exercise, or defend legal claims. We never sell your data or use it for third-party advertising.

5. International data transfers

Some of our providers may process data outside the European Economic Area, mainly in the United States (Vercel, Cal.com; Google, if you consent to analytics or play an embedded video). When your data is transferred there, we rely on appropriate safeguards: the EU-US Data Privacy Framework for certified providers, and the European Commission's Standard Contractual Clauses. Where we can, we keep data inside the EU.

6. Cookies and similar technologies

Cookies are small files stored on your device; similar technologies include your browser's local storage. We use them sparingly.

• Essential: we save your cookie choice (clxConsent) and your language preference (clxLang) in your browser's local storage so the site remembers them. These are necessary for the site to work and do not require consent.
• Analytics: Google Analytics sets cookies (_ga, _ga_*, up to 2 years) only after you accept them. Until then, consent is set to “denied”: no analytics cookies are placed and no analytics data is sent.

Some project pages may embed a YouTube video in privacy-enhanced mode; cookies are only set and data only sent to YouTube once you play the video. You can accept or reject analytics when you first visit, and change your mind at any time using the “Cookie settings” link in the footer. You can also block or delete cookies in your browser settings. Declining analytics does not limit your use of the site.

7. How long we keep your data

• Inquiry and lead data: kept for as long as needed to handle your request and, if we stay in contact, to maintain the relationship, up to a maximum of 2 years from our last contact.
• Client records: where we work together, invoicing and accounting records are kept for the periods required by tax and commercial law (generally 4 to 6 years).
• Job applications: deleted no later than 6 months after the application process ends, unless you agree to a longer retention.
• Analytics: Google Analytics data is retained for 14 months.
• Server logs: kept only briefly, for security and troubleshooting.

8. Your rights

You have the right to access, rectify and erase your personal data, to restrict processing, to data portability, to object to processing based on our legitimate interest, and to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. We do not make decisions with legal or similarly significant effects based solely on automated processing.

To exercise any of these rights, email us at info@clarroxweb.com, telling us your name and which right you want to use. We will reply within one month. If you believe we have mishandled your data, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es. If you are in another EU country, you can contact your local data protection authority instead.

9. Children's privacy

This site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 14, the age of digital consent in Spain. If you believe a child has given us their data, contact us and we will delete it.

10. Links to other sites

Our site links to other websites, such as our social media profiles and our booking page. This policy does not cover them, so please review their own privacy policies.

11. Changes to this policy

We may update this policy to reflect changes in how we work or in the law. We will update the date below when we do, and we recommend checking back from time to time.

Last updated: July 2026 · Prepared for the relaunch of clarroxweb.com; reflects the data flows of this website and should be reviewed by qualified counsel before go-live.