Privacy notice.

This policy explains what data we collect when you interact with drapercode.com, what we use it for, who we share it with, and what rights you have.

Who is the controller.

Draper Code is the data controller for this site. For any inquiry about your data, reach us via the contact page.

What data we collect.

• Contact form data: name, company, email, WhatsApp (optional), team size, the process you want solved, urgency.
• Basic technical data: browser language, ES/EN preference, cookie consent state.

We don't collect sensitive data (health, religion, ideology, orientation). We don't use tracking cookies or advertising profiles.

What we use your data for.

• To respond when you contact us.
• To prepare proposals that make sense for your case.
• To comply with legal obligations (invoicing, tax) if you become a client.

We don't sell your data. We don't share it with third parties for marketing.

Who we share it with.

Only with strictly necessary providers to operate the service, always under data processing agreements:

• Hosting provider (Vercel).
• Transactional email provider (if applicable).
• AI providers we use to build automation for clients (always with your explicit authorization and only after you become our client).

How long we keep your data.

Contact form data is kept while the commercial conversation is active plus 12 additional months in case you reach back. After that, it's deleted, except for tax obligations that require keeping invoices (6 years in Spain).

Your rights.

You can exercise at any time:

• Access: request a copy of the data we hold about you.
• Rectification: correct inaccurate data.
• Erasure (right to be forgotten): ask us to delete your data.
• Objection: object to specific processing.
• Portability: receive your data in a structured format.
• Complaint: file a complaint with the Spanish Data Protection Agency (AEPD) or your country's authority.

To exercise any right, contact us via the contact page.

Legal basis.

We process your data based on your consent (when you complete the form) and on Draper Code's legitimate interest (responding to commercial inquiries). We comply with GDPR, LOPDGDD (Spain), and equivalent laws in countries where we operate.

Changes to this policy.

If we update this policy, we change the date at the top and, for material changes, we notify you via email if you've previously contacted us.