Privacy Policy

Rebecca Design ("we," "us") is the data controller for the personal data described in this policy. We're based at Carrer d'Europa, 30, Les Corts, 08014 Barcelona, Spain. Our registered legal form and NIF/CIF are pending verification and will be added to this notice once confirmed — see the Terms & Aviso Legal page for our current identification details. Contact us about privacy at support@rebecca-design.com.

Contact form (/contact/): name, email, the service you selected (if any), and your message.

Checkout (/checkout/): name, email, phone (optional), company (optional), billing address (country, address, city, postcode), VAT/NIF (optional), your preferred start window, an optional project brief, and how you found us.

Payment: our checkout currently operates as a demonstration of the purchase flow — no card details are transmitted, processed or stored by us or by any payment provider. When live payment processing is enabled, this policy will be updated to name the payment processor used and its role as a data processor.

Analytics (only after you consent): pages viewed, general device/browser information, and aggregated usage patterns, via Google Analytics 4. See the Cookie Policy for full detail.

To reply to your enquiry and to deliver a package you've bought — necessary to perform our contract with you, or, before a contract exists, our legitimate interest in responding to your enquiry.

To issue invoices and keep the accounting records Spanish law requires — a legal obligation.

To understand how the site is used — only with your consent, gated behind the cookie banner.

We keep your data for as long as necessary to fulfil the purposes above, and in any case for the periods Spanish commercial and tax law require for invoicing and accounting records — generally up to six years. Contact-form enquiries that don't lead to an order are kept only as long as needed to handle the enquiry, then deleted.

We don't sell your data. It's shared only with service providers that support the site and our studio operations — for example, our hosting and email providers — acting as data processors under written agreements, and, only after you consent to analytics, with Google for Analytics 4 processing.

The site uses cookies and similar local storage. See the Cookie Policy for the full list of categories, what each does, and how to manage your choice.

Where a service provider (such as Google, for consented analytics) processes data outside the EEA, that transfer is covered by an approved safeguard such as the European Commission's Standard Contractual Clauses.

Under the GDPR and Spain's LOPDGDD, you can ask us to: access the data we hold about you; correct it; delete it; restrict or object to its processing; and receive a portable copy. To exercise any of these, email support@rebecca-design.com — we'll respond within the timeframes GDPR sets out.

If you think we've mishandled your data, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es), in addition to contacting us directly.

We'll update the "Last updated" date above whenever this policy changes, and post the current version here — no separate notification for minor changes.

support@rebecca-design.com · +34 932 274 520 · Carrer d'Europa, 30, Les Corts, 08014 Barcelona, Spain.