Privacy policy

This policy explains how we process the personal data you give us through norstudio.es, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (Ley Orgánica 3/2018, LOPDGDD).

1. Data controller

• Data controller: Eliseu Bellés Martí (NOR studio)
• Tax ID (NIF): 20907184T
• Address: Sc Puerto, 6, Poblats Marítims, 46024 València (Valencia), España
• Email: [email protected]

2. What data we process and why

Contact form. Name, email and, if you give them to us, phone number, company, website, sector, needs, approximate budget, how you heard about us and your message. We use them to reply to your enquiry, prepare a proposal if you ask for one and follow up on that conversation. If you accepted analytics, we also store with your enquiry the page you landed on, the website you came from and the campaign parameters, so we know which channels work.

Email, phone and WhatsApp. If you write to us at [email protected], call us or message us on WhatsApp, we process the data in your message for the same purpose. On WhatsApp, the conversation also goes through WhatsApp’s (Meta’s) servers, under their own terms.

Free SEO and AI audit. We store the address analysed, your email address, the score and an encrypted fingerprint of your connection, which is not your IP address. We use them to email you the report, to limit use to 3 analyses a day and, only if you tick the box, to email you about the result. To measure speed, we send the address to Google’s PageSpeed Insights.

Security. To prevent automated spam submissions, the form uses Cloudflare Turnstile, which analyses technical data about the connection.

Analytics. Only if you accept it do we use Google Analytics to measure, in aggregate, how the website is used. More details in the cookie policy.

3. Legal basis

• Replying to your enquiry and preparing a proposal: taking pre-contractual steps at your request (article 6(1)(b) GDPR). The form checkbox only confirms that you have read this information.
• Protecting the form against spam and limiting use of the free audit: legitimate interest in the security of the website and in preventing abuse (article 6(1)(f) GDPR).
• Sending you the free audit report: your request (article 6(1)(b) GDPR). Emailing you about the result, only if you tick the box: your consent (article 6(1)(a) GDPR), which you can withdraw at any time.
• Analytics and the origin of your enquiry, if you enable analytics: your consent (article 6(1)(a) GDPR).

4. How long we keep your data

If we end up working together, for the duration of the relationship and, afterwards, for the periods required by law. If not, for a maximum of 12 months from our last contact, after which we delete it. Contact form enquiries and free audit records are deleted automatically after 12 months.

5. Recipients and processors

We do not share your data with third parties unless required by law. The following providers process it on our behalf, under a data processing agreement:

• Cloudflare: website hosting, the form and audit database, and spam protection.
• Resend: sending the internal notification for each enquiry and the free audit report.
• Google: email, speed measurement for the audit and, if you accept it, analytics.

Some of these providers may process data outside the European Economic Area. In that case, the transfer is covered by the EU-US Data Privacy Framework or by standard contractual clauses approved by the European Commission.

6. Your rights

You can request access, rectification, erasure, objection, restriction of processing and portability of your data, and withdraw your consent at any time, by writing to [email protected]. If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).

7. Third-party data

If you give us data about other people, for example members of your team, you must have informed them and have their permission.