Legal
Privacy Policy
How we use your data, for what purposes and what your rights are.
Last updated: 24 April 2026
1. Data controller
2. What personal data do we process?
We only process data that you voluntarily provide when contacting us via the email address available on the Site. This data may include:
- Full name
- Email address
- Phone number (if voluntarily provided)
- Information about your company, project or enquiry
This website does not use tracking cookies, third-party analytics tools (such as Google Analytics), automated lead capture forms or any system that collects browsing data for advertising or profiling purposes. You can find more information in the Legal Notice.
3. Purposes of processing and legal basis
We process your data for the following purposes and under the indicated legal bases:
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry or information request | Art. 6(1)(b) GDPR: application of pre-contractual measures at the request of the data subject |
| Managing the engagement and commercial relationship | Art. 6(1)(b) GDPR: performance of a contract to which the data subject is party |
| Compliance with accounting and tax obligations | Art. 6(1)(c) GDPR: compliance with a legal obligation |
We do not use your data to send commercial communications without your prior and explicit consent.
4. Data retention
Your data will be retained for as long as strictly necessary to handle your enquiry and, where a contractual relationship is formalised, for the duration of that relationship.
Once the purpose has been fulfilled, data may be retained in a blocked state during the applicable statutory limitation periods:
- 6 years for civil and commercial obligations (UK Limitation Act 1980 / art. 1964 CC and 30 C.Com. where applicable)
- 4 years for tax obligations
After these periods, data will be securely deleted.
5. Recipients and international transfers
Your data will not be shared with or transferred to third parties, unless there is a legal obligation requiring us to do so.
The Site may be hosted on servers provided by external suppliers (e.g. hosting providers with servers in the EU/EEA). These providers act as data processors under Art. 28 GDPR and have the appropriate safeguards in place for processing your data. No international transfers of data outside the European Economic Area are made without the corresponding safeguards.
6. Your rights
Under the GDPR and applicable data protection law, you have the right to:
- Access: know what personal data we process about you.
- Rectification: correct inaccurate data or complete incomplete data.
- Erasure: request the deletion of your data when, among other reasons, it is no longer necessary for the purpose for which it was collected.
- Objection: object to the processing of your data in certain circumstances.
- Restriction of processing: request the restriction of processing in the cases provided for in Art. 18 GDPR.
- Portability: receive your data in a structured, commonly used format where processing is based on consent or a contract.
To exercise any of these rights, please contact us at hola@simadesign.es, attaching a copy of your ID or other valid identification document.
If you consider that the processing of your data is not adequate or infringes your rights, you have the right to lodge a complaint with the relevant supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD) at www.aepd.es; or, in the UK, the Information Commissioner's Office (ICO) at ico.org.uk.
7. Security measures
We apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Art. 32 GDPR, in order to protect your personal data against unauthorised access, loss, accidental destruction or alteration.
8. Changes to this policy
This Privacy Policy may be updated to reflect changes in legislation or in our activities. The current version is the one published on the Site with the update date indicated at the top of the document. We recommend that you consult it periodically.