LEGAL / HALCY
Privacy Policy
A clear explanation of how your information is handled when you browse this website or contact the studio.
Sample content · Details to complete
This is a sample legal page. Fill in the details in brackets and adapt it to the owner and practices of your website before you publish it.
01 / Who is responsible
Controller: [Business legal name]. Trading name: [Studio name].
Registered address: [Business address]. Privacy contact: [Privacy email].
02 / Information you provide
The contact form asks for your name, email address and message. Company name is optional. These details come directly from you and are used to answer your enquiry and discuss the services you request. Please do not include sensitive personal information in your message.
Fields marked as required are needed to handle your enquiry. Submitting an enquiry does not subscribe you to marketing communications.
03 / Purpose and legal basis
Project enquiries are handled to take steps at your request before entering into a contract (Article 6(1)(b) GDPR). Other business enquiries may be handled on the basis of legitimate interest in responding to communications (Article 6(1)(f) GDPR), where applicable.
Personal information is used to respond to the enquiry and discuss requested services. It is not used for unrelated marketing without an appropriate legal basis.
04 / Retention
Enquiry data is retained only as long as necessary to respond and complete relevant follow-up. Where a client relationship begins, applicable contractual, accounting and legal retention duties may apply.
Enquiry retention period: [Retention period or criteria].
05 / Service providers and transfers
Website hosting: [Hosting provider]. Form delivery and other service providers: [Providers used by the business]. Personal information may also be disclosed when legally required.
International transfers and safeguards, where applicable: [Relevant transfer arrangements].
06 / Browsing and cookies
This website stores one necessary cookie to remember that you have seen its cookie notice. No optional advertising or analytics cookies are configured. See the Cookie Policy for details.
Hosting providers may process technical information needed to deliver and secure the website. Provider privacy information: [Applicable provider notices].
07 / Your rights
Depending on the processing and applicable law, you can request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.
Contact for rights requests: [Privacy email]. You may complain to the competent supervisory authority. For businesses established in Spain, this is the Agencia Española de Protección de Datos (AEPD).
Automated decision-making and profiling: [Business-specific information].
AEPD · Spanish data protection authority
08 / Updates
Last updated: [Policy revision date]. This policy may be updated when the website, services or processing practices change.