Privacy policy

Controller

Sucess Sociedad Civil (Islas Digital), tax ID J76775147, Candelaria, Santa Cruz de Tenerife, España.

Contact for any privacy matter: hello@islas-digital.com.

What data we process and why

• Answering your messages: website forms, call bookings, email and WhatsApp (name, email, phone and the content of your message).
• Providing the service you sign up for: the business details you send us in the onboarding form (texts, photos, access you choose to share).
• Payments and invoicing: Stripe handles the payment; we never see or store your card number. We keep subscription and billing records.
• Measuring website use and, if you agree, our ads (see Cookies).

Legal basis

Answering your enquiry and providing the service: pre-contractual steps and performance of a contract (Art. 6(1)(b) GDPR). Invoicing and tax duties: legal obligation (Art. 6(1)(c)). Website statistics: legitimate interest in improving the service (Art. 6(1)(f)). Third-party analytics and advertising cookies: your consent (Art. 6(1)(a)), which you can withdraw at any time.

Retention

• Invoices and accounting records: 6 years, as required by article 30 of the Spanish Commercial Code (Código de Comercio).
• Customers: for as long as the contract lasts and afterwards only for the periods the law requires.
• Enquiries that never became a contract and business contacts without a customer relationship: 2 years after the last contact; then we delete them.

You can ask us at any time to delete an enquiry or contact that never became a contract sooner.

Who we share data with (processors)

We do not sell your data. To run the service we use these providers:

• Vercel Inc. (USA): hosting of the website and forms.
• Vercel KV / Upstash: database where we store onboarding and payment records.
• Stripe Payments Europe Ltd. (Ireland): payments and subscriptions.
• Resend and our own SMTP mail server: sending emails (confirmations and service messages).
• Telegram and Telnyx: internal alerts to the provider when a message, booking or payment comes in (SMS / message with the content received).
• Smartlead: management of our commercial emails; once you sign up, sends to your address are stopped.
• Umami, hosted on our own server: cookie-free visit statistics.
• Google (Google Ads and Google Fonts): ad measurement only if you accept advertising cookies; fonts are loaded from Google servers, which receive your IP address.
• WhatsApp (Meta): if you write to us on WhatsApp, the message goes through that platform.

Some of these providers are in the USA. Transfers rely on the safeguards of the GDPR (adequacy decision or standard contractual clauses).

Cookies

Necessary cookies are always on. Analytics and advertising cookies are only enabled if you accept them in the banner, and you can change your choice at any time. Google Ads runs with Consent Mode: without your permission no advertising cookies are stored.

Your rights

You can ask us for access, rectification, erasure, objection, restriction and portability by writing to hello@islas-digital.com. We reply within one month at most.

If you think we handle your data wrongly, you can complain to the Spanish Data Protection Agency (AEPD): www.aepd.es.