Privacy Policy

Who is responsible

The controller of personal data collected on this website is [NEEDS VERIFICATION: legal entity name, tax ID, registered address and privacy contact email], trading as Castillo Design.

What we collect

Only the information you choose to send through the project inquiry form: first name, last name, email, phone, project location, project type, approximate timeline, message and preferred language. We do not ask for sensitive data — please do not include it in your message.

Why we use it

To reply to your inquiry and, if you wish, to prepare a proposal. The legal bases are your consent and steps taken at your request before entering into a contract (GDPR art. 6.1.a and 6.1.b). We do not use your data for advertising and we do not sell it.

Who processes it for us

• Form delivery: Formspree, Inc. (United States) receives the submission over HTTPS and forwards it by email. [NEEDS VERIFICATION: provider DPA and international transfer safeguards]
• Email: the inquiry is stored in the Castillo Design mailbox. [NEEDS VERIFICATION: mailbox provider]
• Hosting: Vercel Inc. serves this website and may process technical data such as IP addresses in server logs for security and delivery.

How long we keep it

[NEEDS VERIFICATION: retention period] Inquiries that do not lead to a project are deleted after this period.

Your rights

You may request access, rectification, erasure, restriction, objection and portability, and withdraw your consent at any time, by writing to [NEEDS VERIFICATION: privacy contact email]. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or your local supervisory authority.

Cookies and tracking

This website does not use cookies, analytics or advertising trackers. See the Cookie Policy.