Legal
Privacy notice
Draft · to be reviewed before launch
Who we are
The controller of your personal data is WTF Agents. Contact: hola@wtfagents.com.
What we collect
Diagnostic requests: when you use the contact form we collect your name, your company, the description of the process you send us and your email address. To prevent abuse we also store a one-way hash of your IP address; we never store the address itself.
Guide purchases: when you buy a guide, payment is handled by Stripe. We receive your email address, the product you bought and the amount, so we can deliver the PDF and answer questions about your order. We never see your card details.
Analytics: we use Vercel Web Analytics to count page views. It sets no cookies and doesn't identify you or follow you across sites; it records aggregated data such as the page, the referrer, and the country and device type.
Why, and on what legal basis
We use diagnostic requests to reply to you and discuss a possible project, which is a step you ask us to take before any contract (GDPR art. 6(1)(b)). We use purchase data to fulfil your order (art. 6(1)(b)) and to meet our tax and accounting obligations (art. 6(1)(c)). We use the IP hash to protect the form from abuse, which is our legitimate interest (art. 6(1)(f)). We use aggregated analytics to understand how the site is used, also a legitimate interest (art. 6(1)(f)).
Who processes it for us
Vercel (hosting and analytics), Supabase (database), Resend (email delivery) and Stripe (payments). Some of these providers may process data outside the European Economic Area under the European Commission's standard contractual clauses or an adequacy decision.
How long we keep it
Diagnostic requests: 12 months from when you send them, then deleted. Purchase records: for as long as tax law requires.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format, by writing to hola@wtfagents.com. You can also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).