Buildylab
    ENES
    Legal

    Privacy policy

    This page explains what personal data we process when you use the contact form, email us or book a call, and what rights you have. It follows the EU General Data Protection Regulation (GDPR) and the Spanish data protection law (LOPDGDD). The Spanish version is the reference text.

    Who the controller is

    • Controller: DIXSON VENTURES LLC, trading as BuildyLab.
    • Legal form: limited liability company formed in Florida, United States. Florida registration number: L19000123559. EIN: 35-2667872.
    • Registered address: 2174 Ranch Side Rd, Kissimmee, FL 34744, United States.
    • Privacy contact email: joaquin@buildylab.agency.
    • Website: https://www.buildylab.com.

    What data we process

    • Contact form: your name, your email and the message you write.
    • Technical data sent with the form: the page you write from, the campaign parameters in the link (UTM), the referring page, your browser and your IP address.
    • Emails you send us directly: your address and what you tell us.
    • Call booking: the booking page belongs to Google Calendar. Google collects your name, your email and anything you write when you book, and passes it to us for the meeting.

    We do not ask for special category data. Please do not include it in your message.

    What we use it for

    • To answer your message and to prepare or hold the call you ask for.
    • To send you the proposal or the information you ask for about our services.
    • To know which page you write from, so we understand which service interests you.
    • To protect the form against abuse and automated submissions.

    We do not send newsletters or advertising, we do not sell your data and we make no automated decisions that affect you.

    Legal basis

    • Answering your enquiry and preparing a proposal: steps taken at your request before a contract (GDPR art. 6.1.b).
    • Technical form data and form security: our legitimate interest in protecting the site and knowing which page produces each enquiry (GDPR art. 6.1.f).
    • If we work together: performance of the contract (GDPR art. 6.1.b) and legal obligations, for example tax rules (GDPR art. 6.1.c).

    How long we keep it

    We keep contact data while the conversation lasts and for up to 12 months after the last contact, in case you pick the enquiry up again. Then we delete it.

    If you become a client, the data becomes part of the contract and we keep it for as long as the law requires.

    Who else has access

    • Vercel Inc.: hosting for the website and the contact form.
    • Supabase Inc.: the database that stores contact form messages (our contact records).
    • Resend (Plus Five Five, Inc.): the internal notification email for each new message.
    • Google (Google Workspace, Gmail and Google Calendar): email and the call booking page.

    We do not share your data with third parties unless the law requires it. We use these providers, which process the data on our behalf (processors):

    Processing outside the European Economic Area

    The controller is based in the United States. For this reason, your data is processed outside the European Economic Area (EEA). We offer our services to people and companies in the European Union, so we apply the GDPR to this data (GDPR art. 3.2).

    Our providers also process data in the United States. Vercel Inc. and Google LLC are certified under the EU-US Data Privacy Framework, which the European Commission considers adequate. Their data processing agreements also include the European Commission's standard contractual clauses. Supabase and Resend use the European Commission's standard contractual clauses in their data processing agreements.

    Your rights

    You can ask for access to your data, its correction or its deletion. You can also object to the processing, ask us to restrict it and ask for data portability.

    To exercise these rights, email joaquin@buildylab.agency with the subject "Data protection" and say which right you want to exercise. We answer within one month. If we are unsure who you are, we ask you for one detail to check it.

    Complaints to the supervisory authority

    If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, https://www.aepd.es. We would appreciate it if you wrote to us first, in case we can fix it.

    Cookies and browser storage

    This site uses no analytics or advertising cookies. It only stores the language you choose in your browser (local storage). That is a technical setting you ask for, and it needs no consent.

    If we add a measurement tool in the future, it will work without cookies and we will say so on this page.

    Changes to this policy

    If we change how we process data, we update this page and the date below.

    Last updated:

    Legal notice →