1.Who is responsible for your data
This website is operated by Gorka Di Capitan through Di Capitan Ltd, a company registered in Scotland (company number SC739267), which acts as data controller for gorkadicapitan.com and its Spanish version, gorkadicapitan.es.
For any privacy matter you can write to dicapitan@pm.me.
2.What data is collected
No registration is needed to browse this website, and no personal data is collected for browsing purposes.
Personal data is collected only when you send an enquiry through one of the contact forms. Depending on the form, that may include:
- Name and email address
- Phone number and country (optional fields)
- Business type, budget range and anything you write in the message
The forms also include a simple anti-spam check (an arithmetic question) and a hidden trap field that only automated bots fill in; neither adds any personal data.
3.How the forms actually work
When you press send, your enquiry is transmitted through FormSubmit (formsubmit.co), a form relay service that forwards the content of the form to the website owner's mailbox and acts as a data processor for that delivery. If that service is unavailable, the website falls back to opening your own email application instead.
The mailbox that receives enquiries is hosted by Proton (Proton Mail, Switzerland).
4.Why the data is used and on what legal basis
Enquiry data is used exclusively to answer you and to prepare the quote or collaboration you asked about. The legal basis is taking steps at your request prior to entering into a contract (Article 6(1)(b) UK GDPR) and, for keeping a record of past correspondence, legitimate interest.
Sending an enquiry never signs you up to marketing. Personal data is not used for marketing, profiling, advertising or automated decision-making, and any future marketing communication would only happen with your separate, explicit consent.
5.Data sharing
Personal data is not sold or rented. It is only shared with the service providers listed below, strictly to operate the website and deliver enquiries, or where disclosure is required by law.
6.Data retention
Enquiries that do not lead to a project are deleted from the mailbox within 24 months of the last exchange.
When an enquiry becomes a project, the related correspondence is kept for as long as needed to deliver the work and to meet legal and accounting obligations (up to 6 years in the UK).
7.Data security
Appropriate technical and organisational measures are in place to protect personal data, including encrypted transmission (HTTPS) and an encrypted mailbox.
No online transmission or storage system can be guaranteed to be completely secure.
8.Your rights
You have the right to:
- Access your personal data
- Request correction or deletion
- Object to processing in certain circumstances
- Withdraw consent at any time, where processing is based on consent
You can also lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk. If you are in Spain, you may also complain to the Agencia Española de Protección de Datos (AEPD) at aepd.es.
9.Service providers
This website relies on a small number of providers to operate:
- Vercel, which hosts the website and provides privacy-friendly, cookie-free analytics
- Cloudflare R2, which serves most of the images and videos shown on this website
- FormSubmit (formsubmit.co), which relays contact form submissions to the owner's mailbox
- Proton Mail, which hosts the mailbox where enquiries arrive
- YouTube, which plays the embedded videos on some project pages and may set its own cookies when you press play; YouTube's own privacy policy applies to those players
These providers may process limited technical data, such as IP address, browser information or device information, strictly as needed to deliver the website. Their own privacy policies also apply.
10.International transfers
Some providers (Vercel, Cloudflare, FormSubmit, YouTube) process limited data outside the UK/EEA, mainly in the United States, under appropriate safeguards such as standard contractual clauses. Proton processes mail in Switzerland, a country with a UK and EU adequacy decision.
11.Policy updates
This Privacy Policy may be updated periodically.
Any changes will be published on this page with an updated effective date.