Privacy Policy

Who is responsible for your data

The data controller is Luisa Catalan Alemany (43111164X), Sant Feliu 18. 07012. You can contact us at hello@thelabelandco.com or +34 679 524 168.

What we collect and why

We only collect what we need to answer you and to understand how the site is used.

• Enquiry form: name, email address, telephone (optional), the service you are interested in, a preferred date (optional) and your message. Purpose: to respond to your enquiry and, if you become a client, to provide the service. Legal basis: pre-contractual measures at your request (Art. 6.1.b GDPR) and your consent to be contacted (Art. 6.1.a).
• WhatsApp, email and telephone: if you contact us through these channels, we process the details you provide to reply to you. WhatsApp is operated by Meta Platforms; its own privacy terms apply to the transport of messages.
• Website analytics: we run privacy-friendly, cookieless analytics on our own server. We record the page visited, the referring site, an approximate country derived from the IP address, device type and time on page. The IP address is combined with a daily rotating secret and hashed so that visits within the same day can be counted as one session; the raw IP address is not stored and cannot be recovered. Legal basis: our legitimate interest in measuring and improving the website (Art. 6.1.f). You can object at any time using the Essential only option in the cookie notice.
• Server logs: our hosting provider may keep standard access logs (IP address, user agent, requested URL) for security purposes for a limited period.

How long we keep it

Enquiries are kept for as long as needed to handle them and for up to two years afterwards unless a client relationship follows, in which case data is kept for the duration of that relationship and the legally required periods.

Analytics data is aggregated and does not identify you. Session identifiers expire daily.

Who we share it with

We do not sell or rent personal data. We share it only with providers who help us run the website and our business (hosting, email delivery) under data-processing agreements, and with suppliers strictly necessary to arrange a service you have requested (for example a restaurant or a transfer company), with your knowledge.

Some providers may be located outside the European Economic Area. Where that is the case, transfers are covered by adequacy decisions or the European Commission's standard contractual clauses.

Your rights

You may request access to, rectification or erasure of your data, restriction of or objection to processing, and data portability, by writing to hello@thelabelandco.com. You may also withdraw consent at any time without affecting the lawfulness of prior processing. If you believe your rights have not been respected you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security

The site is served over HTTPS. Enquiries are stored on an access-controlled server, the private dashboard requires authentication with hashed passwords, and we apply rate limiting and other technical controls to reduce abuse.

Changes

We may update this policy to reflect changes in the site or in the law. The date at the top indicates the latest version.