Last updated: October 2026.

Privacy policy

1. Data controller

Miguel García Antelo (Spanish NIF 4822155P), Travesía de Montouto 24 D1 1ºD, Spain. Contact: info@leoncarpe.com.

2. What data we process

Data you provide in the contact form: name, email, company (optional), project type (optional) and the message.

Browsing data collected by Google Analytics and Vercel Analytics, only if you accept their use in the cookie notice.

3. Purposes and legal basis

To answer your enquiry and, where relevant, prepare a proposal for services. Legal basis: pre-contractual measures at your request (Art. 6.1.b GDPR).

To measure website use in order to improve it. Legal basis: your consent (Art. 6.1.a GDPR), which you can withdraw at any time.

4. Recipients and processors

Resend: sends the form emails to our inbox. Vercel: website hosting. Google (Google Analytics) and Vercel (Vercel Analytics): only if you accept usage measurement. Some of these providers are located in the United States; transfers rely on GDPR safeguards such as standard contractual clauses or the EU-US Data Privacy Framework where the provider is certified.

5. Retention

We do not keep a contact database. Messages are kept in our email account for as long as needed to handle the enquiry and, if a professional relationship is formalised, for its duration and the applicable legal periods.

6. Your rights

You may exercise your rights of access, rectification, erasure, restriction, objection and portability, and withdraw your consent, by writing to info@leoncarpe.com.

If you consider that the processing does not comply with the rules, you may lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

8. External links

The WhatsApp button takes you to WhatsApp, a Meta service that processes data you share with it under its own terms. We do not use it until you decide to open it.

9. Automated decisions

We do not take automated decisions with legal effects about you, and we do not build profiles from your data.

10. Security

We apply reasonable technical and organisational measures to protect data. The form is validated on the server and does not send data to third parties other than those listed in section 4.