Legal

Privacy Policy

Last updated: September 2026

1. Data controller

Deborah Arpino, trading as Proxigy, NIF Y8460109X, with business address at Carrer Extremadura 22, Planta 3, Puerta IZ, 07800 Eivissa, Illes Balears, Spain, is the data controller responsible for personal data processed through this website.

Contact for privacy matters: hello@wayfinders.agency. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection legislation.

2. Data we collect

The Wayfinders contact form collects the data you enter into it:

  • Name
  • Business name
  • Website (optional)
  • Email address
  • WhatsApp number (optional)
  • The message you write describing what you would like to improve

The form does not store submissions on this website. When you submit it, the details are placed into a message in your own email application, addressed to hello@wayfinders.agency, which you send yourself. We also receive personal data you send us directly by email or WhatsApp, and project-related data shared during an active engagement.

With your consent, Google Analytics 4 also collects aggregated usage data about your visit. We do not buy data from third-party sources and we do not carry out automated profiling or decision-making.

3. Purpose and legal basis

  • Responding to enquiries you send us (legal basis: your consent and our legitimate interest in replying to a request you initiated)
  • Fulfilling contractual obligations during active engagements (legal basis: performance of a contract)
  • Measuring website usage through Google Analytics 4 (legal basis: your consent)

4. Cookies

This website uses necessary storage and, only with your consent, analytics cookies. Full detail is in our Cookie Policy.

5. Service providers and data sharing

We do not sell, rent or share your personal data with third parties for marketing purposes. Data may be processed by the providers we use to run this business:

  • Lovable, website platform and hosting
  • GoDaddy and Microsoft 365, domain and email services
  • Google Analytics 4, website usage measurement, only where you have accepted analytics cookies

We may also disclose data where required by law.

6. International data transfers

Where personal data is transferred outside the European Economic Area, appropriate safeguards are applied in accordance with the GDPR, including adequacy decisions or Standard Contractual Clauses where applicable.

7. Data retention

Enquiry correspondence is retained for a maximum of 12 months unless an active engagement begins. Project-related data is retained for the duration of the engagement plus 5 years, in line with applicable Spanish commercial law requirements. Analytics data is retained according to the retention setting configured in Google Analytics 4.

8. Your rights under the GDPR

You have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Request erasure of your data
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time where processing is based on consent
  • Lodge a complaint with the Spanish Data Protection Agency (AEPD)

To exercise any of these rights, write to hello@wayfinders.agency.

9. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including access controls and regular reviews of the tools we use.