Privacy Policy

1. Data controller

2. Personal data collected

Royal Imbau may process the following personal data depending on the contact channel used:

• Contact form / quote request: name, email, telephone (if provided), enquiry message and, where applicable, project description.
• WhatsApp: telephone number linked to the WhatsApp account, username and messages voluntarily sent by the user.
• Direct email: email address, name and message content.
• Cookies and browsing data: IP address, browser type, pages visited, session duration and similar technical data, insofar as the user has consented to analytics or marketing cookies (see the Cookie Policy).
• Project photographs and videos: images of property renovations, only with the customer’s express permission (see photographs and testimonials).

Royal Imbau does not collect particularly sensitive data (racial origin, health, beliefs, etc.) or knowingly request data from minors.

With your analytics consent, Microsoft Clarity collects interactions such as clicks, scrolling and pages visited, technical device data and pseudonymous identifiers through cookies and similar technologies. We use heatmaps and session recordings to improve the website; these are not camera or microphone recordings. If you also accept marketing, we authorise Clarity advertising storage for Microsoft measurement and advertising purposes. Clarity does not load without analytics consent.

3. Purposes of processing

• Answering enquiries and quote requests: handling information requests received through the web form, WhatsApp or email.
• Managing the business relationship: preparing and sending proposals, coordinating the contracted renovation and communicating during the project.
• Portfolio and business communications: publishing project photos or videos on the website and social media only with the customer’s prior express, signed permission.
• Website analysis and improvement: through analytics cookies, only with the user’s explicit consent.
• Advertising and retargeting: through marketing cookies and platforms such as Google Ads or Meta Ads, only with explicit user consent.
• Compliance with legal obligations: retaining documents required by tax, accounting or employment law.

4. Legal basis for processing

5. Data retention

Data is retained only as long as strictly necessary for its purpose and, in all cases, for legally required periods:

• Enquiries without a contract: up to one year after the last communication unless the user requests earlier deletion.
• Customer data (contracts): throughout the contract and afterwards until related claims become time-barred (generally five years for civil matters; four years for tax matters).
• Photographs and portfolio: until the data subject withdraws permission.
• Cookies: as stated in the Cookie Policy.
• Microsoft Clarity retains recordings for 30 days; labelled or favourited sessions and heatmap and click data are retained for up to 9 months under its retention policy.

6. Recipients and providers

Royal Imbau does not disclose personal data to third parties for its own commercial purposes. Data is shared only with the following providers insofar as needed to deliver the service:

All providers act as processors under contracts pursuant to Art. 28 GDPR, or as independent controllers for their own services (WhatsApp/Meta, Google and Microsoft).

Microsoft processes Clarity data under its Privacy Statement. You can withdraw consent through “Cookie settings” in the footer; if Clarity was active, the page reloads to stop collection.

7. International data transfers

Some listed providers have servers or are based outside the European Economic Area (EEA), mainly in the USA. These transfers rely on the following safeguards:

• Google LLC and Meta Platforms Inc.: rely on the EU-U.S. Data Privacy Framework or standard contractual clauses adopted by the European Commission.
• Microsoft Corporation: may process data outside the EEA, including in the USA, under the transfer safeguards described in its Microsoft Privacy Statement.
• WhatsApp LLC: data is processed under WhatsApp/Meta’s terms and privacy policy, available at whatsapp.com/legal.

Users may request further information on international-transfer safeguards by contacting the owner at the address in section 1.

8. WhatsApp for customer service

The owner, trading as Royal Imbau, uses WhatsApp to answer enquiries and quote requests. Users start conversations voluntarily, providing their telephone number and any data in the message.

Conversation data will be used exclusively to answer the user’s request under the Royal Imbau trading name, not for unsolicited marketing unless the user has given separate express consent.

Important notice: WhatsApp is a service of Meta Platforms Ireland Ltd. Its use implies acceptance of the Terms of Service and the Privacy Policy of WhatsApp/Meta, which are Meta’s responsibility and outside Royal Imbau’s control.

9. Project photographs and testimonials

The owner, trading as Royal Imbau, may publish project photos, videos or testimonials on the website, social media and marketing materials. This requires the customer’s prior express permission through a specific image-rights release document.

Publication will not include the customer’s full name, exact property address or other identifying personal data without additional express permission.

Customers may withdraw permission at any time by contacting Royal Imbau. Affected content will then be removed or anonymised within a reasonable period.

10. User rights

Users may exercise the following rights under the GDPR and LOPDGDD at any time free of charge:

• Access: confirmation whether data is processed and, if so, access to a copy.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure (“right to be forgotten”): request deletion when, among other reasons, data is no longer needed for its original purposes.
• Objection: object to processing, particularly where based on legitimate interest.
• Restriction of processing: request restriction of processing in certain circumstances.
• Portability: receive data in a structured, commonly used format for transfer to another controller when processing is based on consent or a contract.
• Withdrawal of consent: withdraw consent at any time without affecting the lawfulness of prior processing.

11. How to exercise rights

To exercise any of these rights, users can contact the owner by:

• Email: alejandro.imbau@gmail.com
• Post: Carrer Riu Segura, 44, Castalla (Alicante)

Requests must include the full name, a copy of DNI/NIE or equivalent identification, a clear description of the right to be exercised and any supporting documents. The owner will respond within one month, extendable to three months in complex cases.

12. Right to complain to the AEPD

Users who believe their data protection rights have not been properly addressed may complain to the Spanish Data Protection Agency (AEPD), the competent Spanish supervisory authority:

• Website: www.aepd.es
• Address: C/ Jorge Juan, 6, 28001 Madrid
• Telephone: 901 100 099 / 91 266 35 17

13. Contact

For questions about this Privacy Policy, contact the owner:

• Name: Alejandro Miller, trading as Royal Imbau
• Email: alejandro.imbau@gmail.com
• Telephone / WhatsApp: +34 623 336 460