Website Legal & Privacy Policy
This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and the Spanish Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD).
1. Legal Notice (Aviso Legal)
In compliance with Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), the following information is provided for the website sustainedby.com:
- Site Owners: Phillipa Danielle Cooper and Benjamin Peter Cooper
- Tax Identification (NIE): X6286238Q & X7182012D
- Fiscal Address: Calle Calzada Herrera 5, 29700 Vélez-Málaga, Málaga, Spain
- Contact Email: pippa@sustainedby.com
- Domain: sustainedby.com
2. Privacy Policy
2.1 Data Controller
The entity responsible for processing your personal data (Data Controller) is:
- Name: Phillipa Danielle Cooper
- Address: Calle Calzada Herrera 5, 29700 Vélez-Málaga, Málaga, Spain
- Email: pippa@sustainedby.com
2.2 Data Retention Policy
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Our retention periods are defined as follows:
- Active Clients: Data is retained for the duration of the ongoing contract and business relationship to successfully provide our search consultancy services.
- Legal and Tax Compliance: Upon the termination of our contract, we are legally required by both Spanish (Hacienda) and UK tax regulations to keep invoices, accounting records, and related transactional data for a minimum period of up to 6 years. After this statutory period expires, your financial records will be securely deleted.
- General Inquiries: If you submit a contact form or email us but do not proceed to a formal contract, we will delete your correspondence within 12 months.
2.3 Third-Party Data Processors
To deliver our services efficiently, we share necessary data with trusted third-party processors.
| Processor | Purpose & Processing Activity |
|---|---|
| Google Analytics | Website traffic analysis, performance metrics, and user behavior tracking. |
| FreeAgent | Accounting, invoicing, and financial management for client billing. |
| Google Workspace | Email hosting (Gmail), document storage (Google Drive), and business communications. |
2.4 User Rights (Your GDPR Rights)
Under the GDPR, you have full control over your personal data. You can exercise these rights at any time by emailing us at pippa@sustainedby.com:
- Right of Access: You can request a copy of the personal data we currently hold about you.
- Right to Rectification: You can ask us to correct, amend, or update inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): You can request that we delete your personal data when it is no longer necessary for the purposes collected (subject strictly to our legal tax retention requirements mentioned above).
- Right to Restrict Processing: You can ask us to temporarily suspend the processing of your data under specific conditions.
- Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format to seamlessly transfer it to another controller.
- Right to Object: You can object to our processing of your data, particularly for direct marketing or analytics purposes.
2.5 Supervisory Authorities
If you believe your data protection rights have been violated, you have the right to lodge a formal complaint with a supervisory data protection authority. Given our fiscal residency in Spain and client base in the UK, you can direct complaints to:
- In Spain: Agencia Española de Protección de Datos (AEPD)
- In the United Kingdom: Information Commissioner’s Office (ICO)
sustainedby.com — Málaga · London