Privacy policy.

This is a courtesy translation. The Spanish version prevails in case of discrepancy.

Last updated: October 2026.

At Peyleth Solutions SL we respect your privacy. This policy explains what personal data we process through peyleth.com, why, who we share it with and how you can exercise your rights, in accordance with the GDPR and current Spanish law.

1. Data controller

Under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), the data controller is:

Controller

Peyleth Solutions SL

Tax ID

B93716306

Address

Calle Río Sorbe 9, Bajo G, 29006 Málaga, Spain

Privacy contact

info@peyleth.com

2. Data we process

2.1. Contact form

• What you need (custom development, automation, consulting and, if you say so, the consulting level, or that you are not sure yet).
• Name.
• Email address.
• Description of the problem.
• Acceptance of this privacy policy.

When you visit the contact page, Cloudflare Turnstile processes technical data about your browser and your IP address to protect the form against spam and bots. When you submit an enquiry, we validate the security token generated by this service on the server.

2.2. Text typed on the home page

If you type your problem on the home page, the text is stored only in your browser’s session storage (sessionStorage) to fill in the contact form. It is not sent to our servers until you submit the form, and it is deleted once read or when you close the tab.

2.3. Email and WhatsApp

If you prefer to write to us by email or WhatsApp, we will process the data included in your message for the same purposes. WhatsApp is a Meta service subject to its own terms. Please do not include confidential information or sensitive data.

2.4. Browsing and security data

Vercel, which hosts the site, processes technical data such as your IP address and browser to deliver and protect it. Google Analytics is only enabled if you accept the analytics category; our events exclude identity data, the text you type and URL parameters. For more information, see the Cookie Policy.

2.5. Business relationships

If you have a business relationship with us (client, supplier or partner), we may process the additional data needed to perform the contract, including tax, banking and invoicing data.

3. Purposes and legal basis

Handling enquiries

Answering enquiries and assessing your problem. A person reviews every enquiry before proposing the next step; sending one does not imply acceptance of the project, a quote or reserved capacity.

Legal basis: your consent and, when you ask for a proposal, pre-contractual steps taken at your request.

Site security

Delivering the site, keeping it available and protecting the form against spam and abuse, using the technical data described above.

Legal basis: our legitimate interest in keeping the site secure and operational, with data limited to that purpose.

Providing services

Performing and managing the contracted services, including communication about ongoing projects.

Legal basis: performance of a contract.

Legal obligations

Complying with applicable legal obligations, including tax, accounting and invoicing obligations.

Legal basis: legal obligation.

Marketing communications

The website offers no newsletter sign-up and sends no marketing communications. If these are added in the future, separate and specific consent will be requested.

Legal basis: not active; separate consent if added.

Improving the site

Understanding aggregate use of the site to improve it, through Google Analytics.

Legal basis: your consent to analytics, which you can withdraw at any time.

4. Data retention

• Enquiries and contact. Form enquiries arrive by email in Peyleth’s mailbox; the website does not store them in its own database. They are kept for as long as needed to handle the enquiry and then for the limitation period of any legal claims that may arise.
• Contractual relationships. For the duration of the relationship, followed by retention with restricted access for the legal periods that apply to each type of document. No single period applies to enquiries, contracts, invoices and accounting records.
• Analytics. According to Google Analytics’ retention settings and its cookies’ duration, detailed in the Cookie Policy.

Once the applicable period for each purpose and legal obligation has ended, data are deleted, retained with restricted access or anonymised as appropriate.

5. Recipients

We do not share your data with third parties, except in these cases:

• Service providers. Vercel hosts the site and runs the form submission; Cloudflare provides the Turnstile check; Resend delivers form enquiries by email to the team; and Google provides Google Analytics, only after your consent. They act as data processors. The website does not send the form to a CRM.
• Legal obligations. When required by law, regulation, court proceedings or a request from an authority.
• Public authorities. Tax, labour and social security bodies, to meet legal obligations.

International transfers

Vercel, Cloudflare, Resend and Google may process data outside the European Economic Area, particularly in the United States, depending on the service. Their data processing terms provide for mechanisms such as adequacy decisions or standard contractual clauses approved by the European Commission, depending on the recipient and transfer. You can consult the mechanisms, terms and subprocessors in the agreements from Vercel, Cloudflare, Resend and Google, or ask Peyleth for information about the applicable safeguards.

6. Your rights

As the owner of your data, under the GDPR and the LOPDGDD you can exercise the rights of:

• Access: knowing what personal data we process about you.
• Rectification: asking us to correct inaccurate or incomplete data.
• Erasure: asking us to delete your data when it is no longer needed.
• Restriction: asking us to restrict the processing of your data.
• Portability: receiving your data in a structured format and transferring it to another controller.
• Objection: objecting to processing on grounds relating to your particular situation.
• Withdrawing consent: at any time, without affecting the lawfulness of prior processing.

To exercise them, write to info@peyleth.com or to Calle Río Sorbe 9, Bajo G, 29006 Málaga. As a rule you do not need to attach a copy of your ID; if there is reasonable doubt about your identity, we may ask for the additional information strictly needed to confirm it. We will normally reply within one month, which may be extended by two further months where the complexity or number of requests justifies it, and we will let you know.

If you believe the processing of your data does not comply with the law, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. Security measures

The website applies technical and organisational measures to reduce risks when receiving and processing the contact form, including:

• Strict validation, normalisation and size limits for the fields.
• Request origin checks and Turnstile protection against automated abuse.
• Controls to prevent duplicate submissions.
• Safe handling of the content before it is included in the email to the team.
• Limited technical logs, without form data or URL parameters.
• Optional analytics, enabled only after your consent.

Even so, no security measure on the Internet is infallible and no system is completely secure.

8. Cookies and similar technologies

This site uses necessary storage to remember your cookie choice, show the entry animation only once per visit and carry the text typed on the home page over to the form. Google Analytics only uses cookies if you expressly accept the analytics category. You can change or withdraw your choice at any time from “Cookie settings” in the footer; rejecting analytics does not prevent you from using the content or the form. Details are in the Cookie Policy.

9. Minors

Our services are intended for people over 18. We do not knowingly collect data from minors. If you are a parent or legal guardian and believe a minor has given us data without your consent, contact us so we can delete it.

10. Changes to this policy

We may change this Privacy Policy to adapt it to new legislation, case law or changes in our practices. Any change will be published on this page with its update date.

11. Contact

For any question about this policy or the processing of your data, write to info@peyleth.com or to the postal address Calle Río Sorbe 9, Bajo G, 29006 Málaga, Spain. We will reply as soon as possible and, in any case, within the legal deadlines.