Privacy Policy

Automifya ("we," "us," or "our") operates the website at automifya.es. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or use our services. We are committed to transparency and your right to privacy.

1. Who We Are

Automifya is an international web design agency specialising in high-performance websites for US small businesses. For questions about this policy, our data controller contact is:

Email: privacy@automifya.es
Business email: automifya@gmail.com

2. Data We Collect

Information you provide directly

• Contact forms: name, email address, website URL, business type, and message content when you submit a contact or audit request form
• Quiz responses: answers to our website assessment quiz
• Communications: content of emails or messages you send us

Information collected automatically

• Analytics data: pages visited, time on site, referral source, browser type, device type, and country (collected via Google Analytics 4, anonymised IP)
• Log data: IP address, browser type, operating system, and timestamp (standard server logs, retained for security purposes)
• Cookies: see our Cookie Policy for full details

Information we do not collect

We do not collect payment card numbers or banking details. Payments, if applicable, are processed by Stripe or similar third-party providers who handle all financial data under their own privacy policies.

3. How We Use Your Data

We use the information we collect to:

• Respond to your enquiries and provide the services you requested
• Send you a free website audit or quiz results you requested
• Improve our website, services, and user experience
• Analyse traffic patterns and website performance (anonymised)
• Comply with legal obligations
• Protect against fraud, abuse, and security threats

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and UK, we process your personal data on the following legal bases:

• Consent (Art. 6(1)(a)): Analytics cookies and marketing tracking (you can withdraw consent at any time via our cookie banner)
• Contract (Art. 6(1)(b)): Processing necessary to fulfil the services you requested
• Legitimate interests (Art. 6(1)(f)): Website security, fraud prevention, and improving our services
• Legal obligation (Art. 6(1)(c)): Where required by law

5. Sharing Your Data

We share data only with trusted service providers who process it on our behalf under data processing agreements:

• Google LLC — Google Analytics 4 (website analytics, anonymised), Google Fonts (font delivery). Google's privacy policy: policies.google.com/privacy
• Email providers — for responding to your contact form submissions
• Hosting providers — for website infrastructure and security

We may disclose your information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of Automifya, our users, or others.

6. International Data Transfers

Automifya operates internationally. When we transfer your personal data outside the EEA or UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or rely on adequacy decisions. Google Analytics data is transferred to the US under Google's compliance with the EU-US Data Privacy Framework.

7. Data Retention

• Contact form submissions: retained for 3 years or until the business relationship ends, whichever is later
• Analytics data: 14 months (Google Analytics default, then automatically deleted)
• Server logs: 90 days
• Cookie data: varies by cookie type — see our Cookie Policy

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

GDPR rights (EEA/UK residents)

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your data ("right to be forgotten")
• Restriction: request that we limit processing of your data
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: at any time where processing is based on consent

CCPA rights (California residents)

• Know what personal information is collected and how it is used
• Request deletion of personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising privacy rights

To exercise any of these rights, email us at privacy@automifya.es. We will respond within 30 days (GDPR) or 45 days (CCPA). You may also lodge a complaint with your local data protection authority.

9. Cookies

We use cookies and similar tracking technologies. We implement Google Consent Mode v2, which means analytics and advertising cookies are denied by default until you give consent. For full details, see our Cookie Policy.

10. Children's Privacy

Our website is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@automifya.es and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will update the "last updated" date at the top of this page. Material changes will be communicated via a notice on our website. We encourage you to review this policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Automifya
Email: privacy@automifya.es
Instagram: @automifya