Roldh Studio

Privacy policy

Data controller

What data we process

Only the data you voluntarily provide through the site's forms:

  • Contact form: name, email and message.
  • Project simulator: the answers you choose, your business name if you provide it, your name, your email and, if you add them, a message and the address of your current website.
  • Time calculator: the tasks and times you select, the value of your hour if you provide it, your name, your email and, if you add one, a message.
  • Website analyser: the address of the website you analyse and its result and, if you request the report, your name, your email and, if you add one, a message.
  • The date and time you accept this policy.

In addition, to prevent abusive submissions, when you send a form or request an analysis we keep an encrypted, irreversible fingerprint of your IP address for one hour, after which it is deleted automatically. We do not store the IP address itself.

When you use the analyser, the address you enter is sent to Google to be analysed. We keep that address and its result for 24 hours, without any data that identifies you, so as not to repeat the same analysis; they are only linked to you if you ask us for the report.

We do not ask for special category data. Please do not include any in your messages.

What we use it for

  • To reply to your request for information or a quote.
  • To send you the summary of the plan generated by the simulator, if you request it.
  • To send you your time calculation, if you request it.
  • To send you the analysis report for your website, if you request it.
  • To follow up on your request and, if you wish, prepare a proposal.

We do not use your data to send you advertising or to build profiles, and we do not make automated decisions that affect you. The site's tools only provide indicative results.

Legal basis

  • Your consent, which you give by ticking the box on the form (Article 6(1)(a) GDPR). You can withdraw it at any time, without affecting processing carried out before.
  • Taking steps at your request prior to entering into a contract, when you request a quote (Article 6(1)(b) GDPR).
  • Our legitimate interest in protecting the forms and the analyser against abuse (Article 6(1)(f) GDPR), solely for the temporary IP address fingerprint.

How long we keep it

For as long as necessary to handle your request and, at most, 12 months from our last contact if we do not end up working together. If you become a client, we will keep it for the duration of the relationship and, afterwards, for the periods required by law.

Who else processes your data

We do not share your data with third parties, except where required by law. To run the site, we use providers that act as data processors, under contracts that guarantee the protection of your data:

  • Cloudflare, Inc.: site hosting, running the forms and receiving email. This may involve transfers to the United States, covered by the EU-U.S. Data Privacy Framework and by standard contractual clauses.
  • Brevo (Sendinblue SAS, France): sending the emails related to your request. Data processed in the European Union.
  • Supabase, Inc.: storage of requests, on servers located in Stockholm (Sweden) (European Union). Supabase applies standard contractual clauses in the event of access from outside the EU.
  • Google Ireland Limited: receipt, in the owner's Gmail account, of email sent to [email protected], which is forwarded there automatically. This may involve transfers to the United States, covered by the EU-U.S. Data Privacy Framework and by standard contractual clauses.
  • Google LLC (PageSpeed Insights): automatic analysis of the website address you enter in the analyser. It receives it from our server, without your IP address or any other data about you. This may involve transfers to the United States, covered by the EU-U.S. Data Privacy Framework.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to [email protected], stating which right you wish to exercise. We will reply within one month at the latest.

If you believe we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Minors

The forms on this site are not intended for children under 14. If you are under that age, please do not send us your data.

Security

We apply appropriate technical and organisational measures: encrypted connection (HTTPS), restricted access to the database and access keys stored securely, never in the site's code.

Changes to this policy

We may update this policy to reflect legal changes or changes to the site. The date of the last update appears at the bottom of this page.

Last updated: 14 October 2026