Skip to content
Arslan Web Studio

Privacy Policy

This policy explains what personal data Arslan Web Studio collects through arslan-dev.com, why, and the choices you have. We keep it short and collect only what we need to reply to you and build your website.

Last updated: 31 October 2026

Who is responsible for your data

The data controller is Arslan Web Studio, a self-employed professional based in Spain.

For any question about this policy or your data, email us at the address above.

What data we collect

Data you send us

When you use the enquiry form, we receive:

  • your name and email address
  • the city or region where you guide
  • the package you are interested in
  • anything you write in your message

If you email us directly or become a client, we also receive what you send us to build your website, such as tour descriptions, photos, your logo and billing details.

Data collected automatically

Like any website, the servers that deliver this site record basic technical data when you visit: your IP address, browser type, the page requested and the time of the request. This is used only to deliver the site and keep it secure. We do not use analytics, advertising trackers or social media pixels on this website.

Why we use it and on what legal basis

We process personal data under the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD) for these purposes:

  • Replying to your enquiry and preparing an offer. Legal basis: steps taken at your request before entering into a contract (GDPR art. 6(1)(b)).
  • Building and delivering your website, and invoicing. Legal basis: performance of our contract (art. 6(1)(b)) and our legal obligations under tax and accounting law (art. 6(1)(c)).
  • Keeping the website secure and protecting the form from spam. Legal basis: our legitimate interest in running a safe website (art. 6(1)(f)).

We do not sell your data, use it for automated decision-making or profiling, or send you marketing emails unless you have asked for them.

Service providers we use

We share data only with providers that help us run this website and our business. They process it on our behalf and only for the purposes described here.

  • Web3Forms delivers the enquiry form to our inbox. It receives the details you enter in the form.
  • Google (Gmail / Google Workspace) hosts our email, where enquiries and messages are stored.
  • Our website hosting provider serves the site and keeps the technical logs described above.
  • Google Fonts supplies the typefaces on this site. When a page loads, your browser requests the fonts from Google's servers, which receive your IP address.
  • Unsplash supplies the photographs on this site. Your browser loads them from Unsplash's image servers, which receive your IP address.
  • Payment and accounting providers (for example Payoneer) are used if you become a client, to send invoices and receive payments.

We may also disclose data where required by law, for example to tax authorities.

Transfers outside the EU

Some of these providers are based in, or process data in, countries outside the European Economic Area, such as the United States. Where this happens, the transfer is protected by an adequacy decision (including the EU-US Data Privacy Framework for certified companies) or by the European Commission's Standard Contractual Clauses.

How long we keep your data

  • Enquiries that don't lead to a project: up to 12 months after our last contact, then deleted.
  • Client data: for as long as we work together, and afterwards for as long as Spanish tax and commercial law requires us to keep records, generally up to six years.
  • Technical server logs: kept by our hosting provider for a short period, usually no more than 30 days.

Cookies

This website does not use cookies for analytics, advertising or tracking, so we don't ask for cookie consent. If we add any such tools in the future, we will update this policy and ask for your consent before they run.

Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you
  • have inaccurate data corrected
  • have your data deleted
  • restrict or object to how we process it
  • receive your data in a portable format
  • withdraw any consent you gave, at any time

To use any of these rights, email arslandev96@gmail.com. We will reply within one month. If you think we have not handled your data correctly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority in your own EU country.

Security

The site is served over an encrypted HTTPS connection, and we only use reputable providers for email and form delivery. Access to your data is limited to what is needed to work on your enquiry or project.

Children

Our services are for businesses and professionals. This website is not directed at children, and we do not knowingly collect data from anyone under 14.

Changes to this policy

We may update this policy when our services or the law change. The date at the top shows when it was last updated.

Back to the home page