Skip to content
alisiastudio
Free demo

Privacy policy

This English version is provided for convenience; in case of discrepancy, the Spanish version prevails.

Last updated: 28 September 2026

1. Data controller

  • Controller: Lucas Arnoldus Verweij (Alisia Studio)
  • Tax ID (NIF/CIF): Y0593803A
  • Privacy contact email: [email protected]

The controller's other identification details are set out in the legal notice.

2. What data we process and why

  • Website form: depending on what the form asks for, your name or your business's name, town, phone or WhatsApp number, email, a link to your website or Google profile and the message you write to us. We use them to reply to your request, book you an appointment, or prepare a proposal or a quote.
  • Email, WhatsApp and phone calls: if you write to us or call us, we process your contact details and whatever you tell us for the same purpose. WhatsApp is a service provided by WhatsApp Ireland Ltd. and is subject to its own privacy policy.

The fields marked as required on the form are needed to deal with your request: without them we cannot reply. We do not make automated decisions or build profiles with your data.

3. Legal basis

  • Taking pre-contractual steps at your request (art. 6.1.b of the RGPD, the EU General Data Protection Regulation, also known as the GDPR): you write to us to ask for information, an appointment, a proposal or a quote, and we use your data to give it to you. By ticking the box on the form you confirm that you have read this information; it is not a separate consent.
  • If we reach an agreement, performance of the contract (art. 6.1.b RGPD) and compliance with legal obligations, such as tax obligations (art. 6.1.c RGPD).
  • Our legitimate interest in keeping the website and the form secure and free of spam (art. 6.1.f RGPD).

4. How long we keep your data

  • With Web3Forms: only what is strictly needed for your message to reach our inbox. As soon as it arrives, we delete the submission from their dashboard.
  • In our inbox: for as long as we need to deal with your request. If we do not go on to have a business relationship, we delete your data no later than one year after your last contact with us. If we do, we keep it for the duration of that relationship and, afterwards, for the periods required by law (for example, tax obligations).

5. Who we share your data with

We do not pass your data on to third parties unless required by law. To keep the website and our contact channels running, the following providers process it on our behalf as data processors:

  • Web3Forms, a service of Web3Creative (India): receives the messages sent through the form and forwards them to us by email. To filter spam, it may share your IP address and email with its sub-processors, listed in its data processing agreement (https://web3forms.com/dpa). Privacy policy: https://web3forms.com/privacy.
  • Cloudflare, Inc. (United States): hosts the website and serves it securely.
  • Cloudflare Web Analytics: measures visits in aggregate and without cookies (section 7).
  • Cloudflare Email Routing, also from Cloudflare, Inc.: forwards the emails sent to [email protected] to our mailbox.
  • Gmail, a service of Google Ireland Limited (Ireland): the mailbox where we receive and keep your messages.

Web3Creative processes the data from India, outside the European Economic Area. That transfer is covered by the standard contractual clauses approved by the European Commission (Implementing Decision (EU) 2021/914), which form part of its data processing agreement. The other providers that process data outside the European Economic Area, such as Cloudflare in the United States, cover the transfer with the EU-US Data Privacy Framework or with standard contractual clauses approved by the European Commission.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to [email protected] and stating which right you are exercising. If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

7. Cookies

This website does not use cookies, whether its own or third-party, for analytics or advertising.

  • Statistics: we use Cloudflare Web Analytics, which measures visits in aggregate, without cookies and without identifying you.

8. Security

We apply appropriate technical and organisational measures to protect your data, such as an encrypted connection (HTTPS) across the whole website.

9. Changes to this policy

We may update this policy to reflect changes in the law or to the website itself. The date of the last update is shown at the top.