Privacy policy
Who processes your data
Francisco Javier Martín Durán (VIBIN'), NIF 40362836K, based in Serinyà (Girona, Spain). For anything about your data: hello@vibin-studio.com. The full address is in the legal notice.
What we collect and why
If you use the contact form: name, email, phone (if you give it) and your message, to reply to you.
If you place an order: business name, activity, town, your current website, what you want to achieve, languages, add-ons, your contact details, your preferred time to call and, if you care to say, how you heard about us. We use it to build your website and manage the order.
If you use the private preview link: the decision you make, the notes you write and the viewing time you have left, which we store on our server so the link behaves the same even if you switch device.
If you answer a survey or leave a review: the reason, the score and whatever you write. A review is published only if you tick the box allowing it, and you can ask us to remove it at any time.
If you pay: the name, address and tax number you give for the invoice. Card details are handled directly by Stripe; we never see or store them.
We also record the visit source parameter (utm_source) if you arrive from an identified ad or link, to know which channels work.
If you use the questions chat: it answers in your own browser using the frequently asked questions on this site and sends nothing. Only when it cannot answer do we receive the question you typed, with no data about you, so we can add it to the list.
Legal basis
Your consent, when you tick the form box or send us a review. You can withdraw it at any time.
Performance of the contract, when you place an order or take out maintenance.
A legal obligation, for invoicing and accounting.
Our legitimate interest in improving the service and knowing which channels work, in aggregate and without profiling.
Who else sees it
Netlify, Inc. (site hosting, forms and storage of the preview link timer).
Stripe Payments Europe, Ltd. and its group (payments and invoicing).
Google Ireland Ltd. (our business email).
Some of these providers may process data outside the European Economic Area. Where that happens, the transfer relies on the European Commission's standard contractual clauses or the EU-US Data Privacy Framework. We do not share your data with anyone else and we never sell it.
How long we keep it
If we never work together: up to twelve months from the last contact.
If there is a contract: for its duration and afterwards for as long as legal obligations require (six years for accounting records, four for tax).
Survey answers are kept in aggregate to measure and improve.
Cookies and browser storage
This site uses no tracking or advertising cookies and no third-party analytics, so you will not see a cookie banner.
We only keep the visit source parameter (utm_source) in your browser for the session. If you go on to pay, Stripe uses its own cookies on its payment page, needed for transaction security.
Security
The site is always served encrypted (HTTPS). Preview links are signed and expire, and form data is only reachable from accounts protected with a password and two-step verification.
Your rights
You can ask us for access to your data, its correction or deletion, object to processing, restrict it or request portability, by writing to hello@vibin-studio.com. We reply within one month at most.
If you believe your request was not handled properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).