Last updated: 28 October 2026
Privacy policy
This is a translation for your convenience. If there is any difference, the Spanish version prevails.
This policy explains how we process your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).
Summary
| Controller | Graziele Oliveira da Silva (GC Future Design) |
|---|---|
| Purposes | Answering your enquiries, preparing quotes, handling orders and projects, and the waiting list |
| Legal basis | Pre-contractual steps and contract, legal obligations and your consent |
| Recipients | Service providers (email and hosting) and public authorities where required by law. We never sell your data |
| Your rights | Access, rectification, erasure, objection, restriction, portability and withdrawal of consent |
1. Data controller
- Owner: Graziele Oliveira da Silva
- Tax ID (NIF): 16862869M
- Address: Calle Alfredo Palma 22, 1.º B, 29603 Marbella (Málaga), España
- Data protection email: dropsales4@gmail.com
We are not required to appoint a data protection officer.
2. What data we process, why and on what legal basis
The forms on this website send nothing by themselves: they open your email app with the message ready and you decide whether to send it. We only process the data you send us.
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| You write to us or ask for a quote | Name, email and, if you provide them, phone, business, language, time slot and your message | Replying, calling you if you ask, and preparing a proposal | Steps taken at your request before a contract (art. 6.1.b GDPR) |
| You buy a skill or hire a service | Name, email, billing details (tax ID and address if you need them on the invoice) and order details | Handling the order or project, delivering it, invoicing and dealing with issues and warranties | Performance of the contract (art. 6.1.b) and legal tax and consumer obligations (art. 6.1.c) |
| You join the 1:1 sessions waiting list | Name, email, language and your message | Letting you know when places open | Your consent (art. 6.1.a), which you can withdraw at any time |
| You visit the website | IP address, date and time, requested page and technical browser data, in server logs | Serving the website and keeping it secure | Legitimate interest in the security and operation of the website (art. 6.1.f) |
Fields marked as required in each form are needed to help you. We make no automated decisions, build no profiles and do not use your data for advertising.
3. How long we keep your data
- Enquiries and quotes that don’t become a project: one year from the last contact.
- Clients, orders and invoices: for the duration of the relationship and then for the periods required by law (six years for business records under art. 30 of the Spanish Commercial Code, plus tax limitation periods).
- Waiting list: until we open the sessions or you withdraw your consent.
- Server logs: our hosting provider’s retention periods, usually a few days.
4. Recipients
We do not pass your data to third parties unless required by law. To provide our services we use these providers, acting as data processors:
- Google Ireland Ltd. (Gmail and, if you choose it, Google Meet): email and video calls.
- Vercel Inc.: hosting of the website and the demos.
- Umami Software, Inc.: cookie-free visit statistics (pages viewed, country, device type, referring website and button clicks), without storing your full IP address or building a profile of you. Legal basis: our legitimate interest in knowing which parts of the website work.
- WhatsApp (Meta): only if you message us or ask us to message you on WhatsApp.
- Tax and accounting adviser: where needed to issue invoices and keep accounts.
We do not take card payments on the website today. If we add a payment provider, we will update this policy.
5. International transfers
Vercel Inc., Umami Software, Inc. and some Google and Meta group companies may process data in the United States. These transfers rely on the EU-US Data Privacy Framework adequacy decision or, failing that, on the European Commission’s standard contractual clauses.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time without affecting earlier processing, by writing to dropsales4@gmail.com with the subject “Data protection”. We will reply within one month. If you are not satisfied, you can complain to the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid) or to the authority of your country.
7. Minors
The website is not aimed at children under 14 and we do not knowingly process their data. You must be an adult to buy or hire our services.
8. Social media
We have an Instagram profile. If you interact with it, Meta Platforms Ireland Ltd. processes your data under its own privacy policy; we only see what you post or send us there.
9. Security and accuracy
We apply appropriate technical and organisational measures to protect your data, and the website is served over an encrypted connection (HTTPS). Please give us accurate data and tell us if it changes.
10. Changes
We may update this policy to reflect legal or service changes. The date above shows the latest version.