Privacy.

1. Who we are

Design With Harry S.L. (NIF B98123456), registered at C. Cta. Cosme, 29, 30530 Cieza, Murcia, Spain, is the data controller for personal data collected through this website and in the course of delivering our web design services. We operate under Spanish law and comply with Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).

Contact for data matters: hello@designwithharry.com

2. What data we collect

When you submit a contact form, build a package, or complete checkout, we collect: your name, email address, phone number, country, and any project notes you provide. Payment data is processed by Stripe and is not stored by us. When you browse our site, standard server logs may record your IP address and browser type for security and performance purposes.

3. How we use your data

We use your data to: respond to your enquiries, process and deliver your order, send the project brief template, communicate project progress, and comply with legal obligations. We do not use your data for automated decision-making or profiling. We do not sell your data to third parties.

4. Legal basis for processing

Processing is based on: contract performance (when you have placed an order), legitimate interest (when you have sent an enquiry), and legal obligation (for invoicing and tax compliance). Where consent is required, we will ask for it explicitly.

5. Data sharing

We share data only where necessary: with Stripe, Inc. for payment processing (governed by Stripe\'s own Privacy Policy); with our email provider for delivering communications; and with Spanish tax authorities where legally required. We do not share data with advertisers or analytics companies.

6. International transfers

Stripe is a US-based company. Your payment data is transferred to the US under Stripe\'s Standard Contractual Clauses with the European Commission. No other international transfers are made.

7. Data retention

Project and contact records are retained for 5 years from the end of the business relationship, as required by Spanish commercial law. Invoice records are retained for the period required by Spanish tax law (currently 4 years). Server logs are retained for 30 days.

8. Your rights

Under GDPR, you have the right to: access your data, rectify inaccurate data, erase your data (where there is no overriding legal obligation to retain it), restrict processing, data portability, and to object to processing based on legitimate interest. To exercise any of these rights, email hello@designwithharry.com. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

9. Cookies

We use a minimal cookie banner with accept/decline options. See our Cookie Policy for details.

10. Changes

We may update this policy to reflect changes in our practices or applicable law. Material changes will be posted on this page with an updated date.