Privacy policy

Controller

Controller: Álvaro Diago de Aguilar, trading as Leeca. Tax ID: 11870058B. Address: Calle de los Andaluces 30, 3B, 28038, Madrid, España. Contact for privacy and data rights: privacy@leeca.io.

Data, purposes and legal bases

If you send an email, Leeca processes your address, any name you provide, the message and the metadata needed to reply, assess fit and take pre-contractual steps at your request. The legal basis is Article 6(1)(b) GDPR. If a professional relationship begins, the data needed to perform the contract and meet legal duties is also processed under Articles 6(1)(b) and 6(1)(c).

Cloudflare may process technical connection data, such as IP address, date, requested path and browser details, to deliver and protect the site. The basis is the legitimate interest in keeping the website secure and available under Article 6(1)(f) GDPR. This information is not used to create marketing profiles.

Retention

Enquiries that do not lead to a professional relationship are kept for no more than twelve months after the last contact, unless a claim exists or the data must be restricted to meet liability obligations. Contract, tax and accounting records are kept for the applicable statutory periods, generally up to six years where required.

Leeca has not enabled application logging or web analytics. Cloudflare keeps operational data it needs for the periods defined by the service and its obligations, according to its current data processing agreement and configuration.

Recipients and international transfers

Zoho provides corporate email and Cloudflare delivers and protects the website. Public authorities, courts, advisers or other recipients may also receive data where required by law or needed to establish, exercise or defend legal claims.

Zoho hosts the email organisation in its European data centre. Cloudflare and Zoho may use subprocessors or allow access from third countries. Their processing agreements provide the European Commission's Standard Contractual Clauses or another valid safeguard where the GDPR requires protection for an international transfer.

Your rights

You can request access, rectification, erasure, objection, restriction or portability by writing to privacy@leeca.io. Leeca may ask for proportionate information to verify identity without collecting more data than needed. You may also lodge a complaint with the Spanish Data Protection Agency at aepd.es.

Security and changes

Measures are proportionate to the risk and data collection is limited. Do not send passwords, identity documents or particularly sensitive information in your first message. This policy will be reviewed if channels, providers or processing activities change.