Last updated: 17 October 2026
1. Who is responsible for your data
The controller of the personal data processed through https://weboptimizer.agency/ (the “Website”) is:
Joan Antoni Barnes Woodward
NIF: 53627987Z
Avenida de Madrid 3, 03720 Benissa, Alicante, Spain
Telephone: +34 647 60 05 60
Email: [email protected]
In this policy, “we” and “us” mean the controller, and “you” means any person whose data we process through the Website.
2. What data we process, why, on what legal basis and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering enquiries you send us by email or telephone | Name, email address, telephone number (if given), the content of your message | Steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) | 12 months after our last contact, unless you become a client |
| Booking a call through the calendar on the Website (Cal.com) | Name, email address, the date and time you choose, and any notes you add | Steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) | 12 months after our last contact, unless you become a client |
| Providing our services to clients and managing the client relationship | Contact details, project communications and the information needed to deliver the service | Performance of a contract (Article 6(1)(b) GDPR) | For the duration of the contract and then for the periods required by tax and commercial law |
| Invoicing and accounting for clients | Name or company name, tax identification number, billing address, invoice and payment details | Compliance with a legal obligation (Article 6(1)(c) GDPR) | The periods required by tax and commercial law |
| Running the Website securely and keeping it working (hosting, content delivery, protection against attacks, performance monitoring) | IP address, browser and device information, pages requested and technical logs | Our legitimate interest in operating a secure, working website (Article 6(1)(f) GDPR) | Only for as long as necessary for these purposes, according to the log retention of the providers listed in section 3 |
| Website analytics (Google Analytics) | Cookie identifiers, pages visited, device and browser information, approximate location | Your consent (Article 6(1)(a) GDPR and Article 22.2 LSSI-CE), given through the cookie banner | Until you withdraw your consent; the cookies expire as set out in our Cookie Policy |
| Measuring the results of our advertising (Google Ads conversion tracking and Meta Pixel) | Cookie identifiers, pages visited and actions taken on the Website | Your consent (Article 6(1)(a) GDPR and Article 22.2 LSSI-CE), given through the cookie banner | Until you withdraw your consent; the cookies expire as set out in our Cookie Policy |
| Recording your cookie choices | Your consent choices and the date they were made | Compliance with our legal obligation to be able to demonstrate consent (Article 6(1)(c) and Article 7(1) GDPR) | 12 months, after which we ask you again |
When we ask for data in order to answer you, book a call or provide a service, the data marked as required are needed for that purpose; if you do not provide them, we cannot carry it out. We do not use your data for automated decisions that produce legal effects on you or similarly significantly affect you, and we do not process special categories of data within the meaning of Article 9 GDPR.
3. Who we share your data with
We do not sell your personal data. We share it only with the service providers we need to run the Website and our business, who process it on our behalf or under their own terms of service:
- Cloudways: managed hosting of the Website. The server is located in a DigitalOcean data centre in Amsterdam (Netherlands, EU).
- Cloudflare: content delivery, security and protection against attacks for the Website, and cookieless visit statistics (Cloudflare Web Analytics).
- New Relic: technical performance monitoring of the Website (EU data region).
- Cal.com: the booking calendar embedded on the Website, used when you book a call.
- Google: Google Analytics and Google Tag Manager (analytics), Google Ads (advertising measurement) and Google Fonts (typefaces loaded from Google’s servers, which receive your IP address when the page loads).
- Meta Platforms: Meta Pixel (advertising measurement).
- Rackspace: hosting of our email mailboxes.
- Elastic Email: sending of emails from our domain.
The cookie banner (CookieYes) runs on our own Website; your choices are stored in a cookie in your browser and in a consent record on our Website.
We may also disclose data to public administrations, courts and authorities where we are required to do so by law.
4. International transfers
Our hosting server is located in the European Union. Some of the providers listed above are based in, or may process data in, countries outside the European Economic Area, including the United States. Where this happens, the transfer relies on an adequacy decision of the European Commission, including the EU-US Data Privacy Framework for providers certified under it, or on the Standard Contractual Clauses approved by the European Commission, as applicable.
5. Your rights
You may exercise the following rights at any time:
- Access: to know whether we process your data and obtain a copy.
- Rectification: to have inaccurate or incomplete data corrected.
- Erasure: to have your data deleted when, among other reasons, they are no longer needed.
- Restriction: to have the processing of your data restricted in the cases provided by law.
- Objection: to object to processing based on our legitimate interest.
- Portability: to receive data you have given us in a structured, commonly used and machine-readable format, or have them sent to another controller.
- Withdrawal of consent: where processing is based on consent, you may withdraw it at any time, as easily as you gave it, without affecting the lawfulness of processing before withdrawal. You can change your cookie choices at any time from the cookie settings button on the Website.
To exercise your rights, write to [email protected] or to Avenida de Madrid 3, 03720 Benissa, Alicante, Spain, stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask you for information to confirm it. We will reply within one month, which may be extended by two further months where necessary, taking into account the complexity and number of requests.
If you believe we have not handled your data properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, https://www.aepd.es/) or with the supervisory authority of the EU Member State where you live or work.
6. Minors
The Website is not directed at minors. In accordance with Article 8 GDPR and Article 7 of Organic Law 3/2018 (LOPDGDD), only persons aged 14 or over may consent to the processing of their personal data. If you are under 14, please do not send us your data.
7. Security
We apply technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS) across the Website, to protect your data against loss, misuse and unauthorised access. If a personal data breach is likely to result in a high risk to your rights and freedoms, we will inform you without undue delay.
8. Links to other websites
The Website contains links to third-party websites, such as our social media profiles. Those websites have their own privacy policies, and we are not responsible for how they process your data.
9. Applicable law and changes to this policy
This policy follows Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE). We may update it when our processing or the law changes; the date at the top shows the latest version. Please check this page from time to time.