Privacy policy

Last updated: 14 October 2026

At Alvaro Studio we take your privacy seriously. This policy explains which personal data we process through this website, why, and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

  • Controller: [NOMBRE Y APELLIDOS / RAZÓN SOCIAL] (Alvaro Studio)
  • Tax ID (NIF): [NIF]
  • Address: [DIRECCIÓN COMPLETA]
  • Contact email: alvaro@alvarostudio.es

2. What data we process and why

  • Contact and free brand review forms: name, email, website (optional) and the message you send us. We use them to answer your enquiry, prepare the requested review and, where appropriate, a quote.
  • Newsletter: your email address, to send you design updates and offers about our services.
  • Technical data: when you browse, our hosting provider automatically processes data such as your IP address to serve the website and protect it against abuse and spam.

You will receive a confirmation email after each submission. We do not make automated decisions or build profiles with your data.

3. Legal basis

  • Contact and brand review forms: your consent (art. 6.1.a GDPR) and pre-contractual steps taken at your request (art. 6.1.b GDPR).
  • Newsletter and commercial communications: your express consent (art. 6.1.a GDPR and art. 21 LSSI-CE), which you can withdraw at any time.
  • Website security: our legitimate interest in protecting it against abuse (art. 6.1.f GDPR).

4. How long we keep your data

  • Enquiries and requests: as long as needed to handle them and, if they become a project, for the duration of the business relationship and the applicable legal periods.
  • Newsletter: until you unsubscribe.
  • Technical security data: for the short periods set by the hosting provider.

5. Recipients and processors

We do not share your data with third parties unless legally required. To provide the service we work with the following providers, acting as data processors:

  • Cloudflare, Inc.: website hosting, security and spam protection.
  • Resend (Plus Five Five, Inc.): sending the form and newsletter emails, and managing the subscriber list.

These providers may process data in the United States. International transfers are covered by the EU-US Data Privacy Framework and/or the standard contractual clauses approved by the European Commission.

6. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to alvaro@alvarostudio.es. You can also unsubscribe from the newsletter using the link included in every email.

If you believe we have not handled your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Cookies

This website does not use analytics or advertising cookies. It only uses technical cookies that are necessary for it to work and exempt from consent (art. 22.2 LSSI-CE):

  • lang (first-party, 1 year): remembers the language you choose with the EN / ES switcher.
  • Cloudflare security cookies (third-party, session or short-lived): protect the website and forms against bots and abuse.

You can block or delete cookies in your browser settings.

8. Minors

This website is not intended for children under 14. If you are under that age, please do not provide us with personal data.

9. Changes to this policy

We may update this policy to reflect legal or service changes. The date of the last update is shown at the top of this page.