Privacy policy

1. Data controller

Controller: Umbral ("Umbral" or "we").

Website: https://umbral.design

Privacy contact: [email protected]

If additional company identification details are provided later, they will be added to this policy.

2. Data we process

We may process the following categories:

• Identification and contact data: name, email and city or area of your project.
• Communication data: messages you send via forms or email.
• Technical data: IP address, device identifiers, browser, language and usage data via cookies or similar technologies, where applicable.

3. Purposes and legal bases

We process data for the following purposes:

• Handling requests submitted through the contact form or email (legal basis: pre-contractual steps at your request and/or consent).
• Responding to commercial enquiries (legal basis: legitimate interest and/or consent).
• Sending marketing about Umbral services only where permitted by law and, where required, your consent.
• Analytics and site improvement (legal basis: consent for non-essential cookies or legitimate interest for aggregated analytics, as configured).
• Compliance with legal obligations (legal basis: legal obligation).

4. Retention

We retain data as long as needed to handle your request and for limitation periods for potential liability.

Commercial contact data is kept while a relationship exists or until you object. Cookie-related data follows the applicable cookie policy.

5. Recipients and processors

We do not sell your data. We may use processors (hosting, email, analytics, CRM) bound by GDPR-compliant agreements.

6. International transfers

If a provider processes data outside the EEA, we ensure appropriate safeguards (e.g. EU Standard Contractual Clauses or adequacy decisions).

7. Your rights

You may exercise rights of access, rectification, erasure, restriction, objection and portability, and withdraw consent at any time.

Contact [email protected] to exercise your rights.

You may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.

8. Children

This site is not directed at children under 14. We do not knowingly collect their data.

9. Security

We apply appropriate technical and organisational measures to protect personal data.

10. Changes

We may update this policy. The current version will always be published on this page.