PRIVACY.

1. Who we are

onfiredesigners S.L. (NIF B91234567), registered at C. Juan Ramon Jimenez, 89, 11207 Algeciras, Cadiz, Spain, is the data controller for personal data collected through this website and in the course of delivering our services. We comply with Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).

2. What data we collect

When you submit a contact form, build a package, or complete checkout: your name, email address, phone number, country, and any project notes you provide. Payment data is processed by Stripe and is not stored by us. Server logs may record IP addresses and browser type for security purposes.

3. How we use your data

To respond to enquiries, process and deliver orders, send the project brief template, communicate project progress, and comply with legal obligations. We do not use data for automated decision-making, profiling, or advertising. We do not sell data to third parties.

4. Legal basis

Contract performance (when you have placed an order), legitimate interest (enquiries), and legal obligation (invoicing and tax compliance).

5. Data sharing

Stripe, Inc. for payment processing. Our email provider for communications. Spanish tax authorities where legally required. No advertising networks.

6. International transfers

Stripe is US-based. Payment data is transferred under Stripe Standard Contractual Clauses. No other international transfers are made.

7. Retention

Project and contact records: 5 years from end of business relationship. Invoice records: 4 years per Spanish tax law. Server logs: 30 days.

8. Your rights

Under GDPR: access, rectification, erasure, restriction, portability, and objection. Email hello@onfiredesigners.com. You may also complain to the Spanish Data Protection Authority (AEPD) at www.aepd.es.

9. Cookies

We use a minimal cookie banner with accept/decline options. See our Cookie Policy for details.

10. Changes

Material changes will be posted on this page with an updated date.