Privacy Policy
How NeatSpaceCare collects, uses, stores, and protects your personal data.
Last updated: 25 June 2026 — Effective date: 25 June 2026
1. Who we are
This policy describes how NeatSpaceCare (“we,” “us,” “our”) collects, uses, and protects your personal data when you use our website at neatspacecare.com or contact us through it.
Data controller:
NeatSpaceCare
Camiño Lourido, 29, Freijeiro
36204 Vigo, Pontevedra, Spain
Contact for data matters:
Email: legal@neatspacecare.com
Phone: +34 973 903 584
Data Protection Officer (DPO): No DPO has been formally appointed at this time. Data protection enquiries should be directed to legal@neatspacecare.com.
2. What data we collect
We collect personal data in the following situations:
When you use the contact or quote request form:
- First name and last name (or name as entered)
- Email address
- Phone number (optional — you are not required to provide this)
- The service you are enquiring about (selected from a dropdown)
- The message you write, which may contain information about your property or project
We do not collect payment information through this website. We do not use the contact form to collect sensitive personal data (as defined in Article 9 GDPR).
Automatically collected data:
We collect standard server log data when you visit the site, which may include your IP address, browser type, operating system, referring URL, and the pages you visit. This data is collected for security and diagnostic purposes and is not used for profiling.
Cookies and analytics:
We use strictly necessary cookies for the site to function (session management, cookie consent preference storage). We do not load analytics or marketing cookies unless you have consented via the cookie banner. See our Cookie Policy for full details.
3. Why we collect your data (legal basis)
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Responding to your enquiry and arranging a quote | Name, email, phone, service, message | Art. 6(1)(b) — necessary to take steps prior to entering a contract |
| Managing an ongoing project or maintenance programme | Name, email, phone, project details | Art. 6(1)(b) — contract performance |
| Legal obligations (tax records, regulatory requirements) | Name, contact details, transaction records | Art. 6(1)(c) — legal obligation |
| Legitimate business interests (security, fraud prevention) | Server logs, IP address | Art. 6(1)(f) — legitimate interests |
| Analytics (aggregated usage tracking) | Anonymised usage data | Art. 6(1)(a) — consent (consent-gated; see Cookie Policy) |
We do not process your data for automated decision-making or profiling.
4. How long we keep your data
- Enquiries that do not become projects: contact form submissions are retained for 12 months from the date of submission, then deleted.
- Project records: retained for the duration of the project plus 5 years, in line with Spanish commercial record-keeping obligations.
- Server logs: retained for a maximum of 90 days for security purposes.
5. Who we share your data with
We do not sell your personal data. We share it only in the following circumstances:
- Email delivery service: We use Resend (resend.com) to send notification emails when a form is submitted. Your name, email, and message are passed to Resend for this purpose. Resend acts as a data processor under our instructions.
- Hosting provider: Our hosting provider processes server logs and may have access to form submission data as part of the infrastructure we use.
- Legal obligations: We will disclose data to competent authorities if required by applicable Spanish or EU law.
6. Your rights under GDPR / RGPD
As a data subject under the General Data Protection Regulation (Regulation (EU) 2016/679) and Spain’s implementing legislation (Ley Orgánica 3/2018, LOPDGDD), you have the following rights:
- Access: request a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: request deletion of your data where there is no overriding legitimate basis for us to retain it.
- Restriction: request that we limit processing of your data in certain circumstances.
- Portability: receive your data in a structured, machine-readable format where processing is based on consent or contract.
- Objection: object to processing based on legitimate interests.
- Withdraw consent: where processing is based on your consent, withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any right, email legal@neatspacecare.com. We will respond within 30 days.
If you believe we have processed your data in breach of GDPR, you have the right to lodge a complaint with the Spanish supervisory authority:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6, 28001 Madrid, Spain
www.aepd.es
7. Security
We take reasonable organisational and technical measures to protect your data — including HTTPS encryption for all data in transit, server-level access controls, and not storing payment data on site.
8. Links to other websites
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and this policy does not apply to them.
9. Changes to this policy
We may update this policy when our practices change or when legal requirements require it. The “last updated” date at the top will reflect any changes.
10. Contact
For any data protection question or to exercise your rights:
Email: legal@neatspacecare.com
Post: NeatSpaceCare, Camiño Lourido, 29, Freijeiro, 36204 Vigo, Pontevedra, Spain