Privacy policy
Who is responsible for your data
Data controller: SW WEB DIGITAL AGENCY BARCELONA CORP S.L. (WooRescue HQ), CIF B66652819, Avenida Manuel Girona 08860 Castelldefels (Barcelona), Spain. Contact: lopd@digitalagencybarcelona.com.
What data we process
Diagnosis requests: name, company (optional), email, website URL, WordPress, WooCommerce and PHP versions, the description of the problem and its business impact, urgency, and optionally error messages, a relevant URL, recent changes and screenshots.
Contact messages: name, email, company (optional), topic and message.
Technical data: to protect the forms against abuse we store a keyed hash of your IP address (not the address itself) and your browser's user-agent string. Our hosting provider keeps standard server logs.
Analytics, only with your consent: if you accept analytics in the cookie banner, Google Analytics 4 collects pseudonymous usage data such as the pages visited, the device and browser and an approximate location. If you do not accept, none of this is collected. See the cookie policy.
The forms explicitly ask you not to send passwords, API keys, card data or other credentials. If such data is detected, the form rejects it before anything is stored. Please also remove personal or payment data of your customers from screenshots.
Why we process it, and on what legal basis
- To answer your request and, if you ask for it, prepare a proposal or quote — steps taken at your request before a possible contract (GDPR art. 6.1.b) and your consent when you submit the form (art. 6.1.a).
- To protect the website against spam and abuse — our legitimate interest (art. 6.1.f).
- To meet legal obligations if an engagement follows (art. 6.1.c).
- To measure how the website is used, only if you accept analytics cookies: your consent (art. 6.1.a), which you can withdraw at any time from the cookie settings link at the bottom of every page.
We do not use your data for advertising, we do not sell it, and we do not make automated decisions about you.
How long we keep it
- Requests and messages that do not lead to an engagement: [12 months — to be confirmed], then deleted.
- Data related to an engagement: for the duration of the engagement and the periods required by Spanish commercial and tax law.
- Abuse-protection data (IP hashes, rate-limit counters): no longer than needed for that purpose.
- Analytics data, if you accepted it: [14 months — to be confirmed in the Google Analytics settings].
Who receives it
Your data is not disclosed to third parties, except to service providers that process it on our behalf under a data processing agreement: our hosting provider (OVHcloud, servers in the European Union), our email provider [to be confirmed] and, only if you accept analytics, Google Ireland Limited (Google Analytics). Google may process analytics data in the United States; Google LLC is certified under the EU–US Data Privacy Framework. No other international transfers are planned.
Your rights
You can request access, rectification, erasure, restriction, portability or objection, and withdraw your consent at any time, by writing to lopd@digitalagencybarcelona.com. If you believe your data has not been processed correctly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
Security
Forms are protected against forgery and automated abuse, data is transmitted over HTTPS, screenshots are stored outside the public part of the website, and access is limited to the people who handle your request.
Changes
This policy may be updated when the website or the way we process data changes. The date of the latest update is shown at the top of this page. [Policy pending legal review.]