Privacy Policy

Last reviewed: draft — pending business and legal review

This policy explains how AGP PandD collects and uses personal data through this website and our services, in line with the EU General Data Protection Regulation (GDPR) and Spanish data-protection law (LOPDGDD).

What personal information we collect

  • Enquiry form details: name, business name, email address, telephone number, business type, services of interest and your message.
  • Client account details: name, email address and the venue or account you are permitted to manage.
  • Correspondence: emails and messages you send us.
  • Technical data: IP address, browser type and pages visited, collected by our hosting and security infrastructure in server logs.

Cookies and website usage

This website uses only the cookies and local storage strictly necessary to operate the site and keep signed-in users authenticated. We do not use advertising cookies. If analytics or other non-essential cookies are introduced, this policy will be updated and consent will be requested first.

Purpose of processing

  • Responding to enquiries and preparing proposals.
  • Providing, hosting and supporting the services a client has contracted.
  • Managing client accounts, invoicing and record keeping.
  • Maintaining the security, integrity and availability of the platform.

Legal bases for processing

  • Consent — when you submit an enquiry or opt in to receive information.
  • Performance of a contract — providing and administering contracted services.
  • Legal obligation — tax, accounting and record-keeping requirements.
  • Legitimate interests — securing our systems and communicating with existing clients about their services.

Email communications

We use email to reply to enquiries, send account invitations and password links, and to communicate about live services. We do not send marketing email without a lawful basis, and any marketing email includes an unsubscribe option.

Third-party service providers

We share personal data only with providers that process it on our behalf under a data-processing agreement:

  • Hosting, database and authentication infrastructure for the platform and website.
  • Transactional email delivery provider for enquiry notifications, invitations and password emails.
  • Payment providers: Stripe

Data retention

Client account and contract data is retained for the duration of the service and afterwards for the periods required by Spanish tax and commercial law. Server logs are retained for a short technical period only.

Your rights

  • Access to the personal data we hold about you.
  • Rectification of inaccurate or incomplete data.
  • Erasure where the data is no longer necessary.
  • Restriction of or objection to certain processing.
  • Portability of data you provided to us.
  • Withdrawal of consent at any time, without affecting prior lawful processing.

Data security

Data is transmitted over encrypted connections, stored on access-controlled infrastructure and protected by role-based permissions so client staff can only reach their own account's data. Access is limited to personnel who need it.

International transfers

Some providers may process data outside the European Economic Area. Where that happens, transfers are covered by an adequacy decision or by the European Commission's Standard Contractual Clauses.

Children and minors

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from minors.

Changes to this policy

We may update this policy to reflect changes in our services or in legal requirements. The current version is always published on this page.

Contact

For any privacy question please use the enquiry form on our homepage.