Privacy Policy

Last updated 29 July 2026

This policy covers shelakh.com. It explains what we do with the information you send us, who else sees it, and how long we keep it.

Who is responsible

Adrián Arribas Lopera, NIF 76429149B, Calle Fuente Alta 22, 41660 Villanueva de San Juan, Sevilla, Spain. Shelakh Web Solutions is the trade name he works under, not a separate company. For anything on this page, write to info@shelakh.com.

Full legal details are on the legal notice.

What we collect

The contact form asks for your name, your email, an optional company name, the kind of work you need, and your message. There is one hidden field that only bots fill in; if it is filled, we discard the submission.

The server keeps access logs: your IP address, the page you requested, the time, and the user-agent string your browser sends. IP addresses are personal data, so we say so here rather than describing logs as anonymous.

Why, and on what legal basis

To answer you. That is our legitimate interest in replying to someone who writes to us, and the steps taken at your request before any contract — GDPR art. 6(1)(f) and 6(1)(b).

To send occasional emails about what the studio ships — only if you tick the box on the contact form. That is consent, GDPR art. 6(1)(a), and you can withdraw it whenever you like. Leave the box alone and you are not added to any list.

To keep the site up and to look into abuse. Legitimate interest, GDPR art. 6(1)(f).

Who else sees it

Three providers handle data on our behalf. We do not sell anything to anyone, and we do not pass your details to third parties for their own marketing.

• Resend delivers our email. If you gave marketing consent, it also stores your name and email as a contact. United States.
• IONOS hosts the server and our mailboxes. The server is in their Logroño data centre, in Spain.
• Google. Mail sent to info@shelakh.com and support@shelakh.com is forwarded on to Gmail, so the text of your message reaches Google. United States.

Transfers outside the EU

Hosting stays in Spain, so running this site moves nothing out of the EU. Resend and Google are both in the United States. Both self-certify under the EU–US Data Privacy Framework, which the European Commission has recognised as offering adequate protection, and both also incorporate Standard Contractual Clauses in their processing agreements.

How long we keep it

• Enquiry emails: 12 months after our last exchange with you.
• Client records: six years. Spanish commercial law (art. 30 of the Código de Comercio) requires accounting records to be kept that long.
• Server access logs: rotated by size, not by date. A log file is kept until it reaches 10 MB, and the ten most recent files are retained. At the traffic this site currently gets that works out at roughly a year — but the limit is size, so it gets shorter if the site gets busier.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to what we do with it, to receive it in a portable form, and to withdraw any consent you have given. Withdrawing consent does not undo what we did before you withdrew it.

Write to info@shelakh.com. We answer within one month.

Complaints

If you think we have mishandled your data, you can complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos, at aepd.es.

Cookies

We run no analytics, no advertising and no profiling. Nothing here follows you to other sites. The one thing we store in your browser is the language you chose, so the site opens in that language next time. That is a preference you asked for, which is why there is no cookie banner.