Privacy Policy

Data Controller

BOND LABS
Calle de Orense 6, Floor 2, 28020, Madrid, Spain
contacto@bondlabs.es

Purposes

• Respond to enquiries received by email or forms.
• Manage leads and commercial relationships.
• Analyse browsing via GA4 and HubSpot, subject to prior consent.
• Prevent abuse and ensure security.

Legal bases

• Performance of pre-contractual measures and legitimate interest.
• Legal compliance.
• Consent for non-essential analytics and forms with non-necessary identifiers.

Categories of data

• Identifying and professional data (name, email, company, job title).
• Pseudonymised browsing data subject to consent.

Retention periods

• Enquiries: 12 months.
• Leads: 24 months without activity.
• Analytics: we respect GA4 retention settings (2 to 14 months by default).

Recipients

• Google Ireland Limited / Google LLC (GA4).
• HubSpot Ireland Limited / HubSpot Inc. (forms and basic analytics).
• Data is not shared with third parties except where legally required.

International transfers

• EU-US Data Privacy Framework (DPF) when the provider is certified.
• Standard Contractual Clauses otherwise.

Rights

You may access, rectify, delete, object to, restrict processing and port your data by contacting contacto@bondlabs.es (with proof of identity). You may also file a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security

We apply appropriate technical and organisational measures to protect your data (access controls, encryption, vulnerability management).

Minors

We do not direct the Site to minors under 14 years of age nor knowingly collect their data.

Changes to this policy

We will publish any updates on this page with an effective date.