Last updated: 11 November 2026
At High Designs we use your data for one thing: dealing with your enquiry and, if you choose us, carrying out your renovation. Here we explain what data we collect, why, for how long and what rights you have.
This policy complies with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
1. Who is responsible for your data
- Data controller: Jorge Luna Vallejo (High Designs – Interior & Home Decor)
- Tax ID (NIF): 52906551L
- Address: Carrer Juan Pablo II, 22, 1B, 46940 Manises (Valencia), Spain
- Email: info@highdesignscompany.com
- Phone: Valencia +34 613 748 507 · Seville +34 643 337 243
2. What data we process
- Data you give us in the quote form: name, phone number, email address, city, type of renovation, approximate budget and what you tell us about your project.
- Data you give us by WhatsApp, phone or email: your number or address and the content of the conversation.
- Browsing data: IP address, device and browser type, pages visited and source of the visit. Analytics and advertising data are only collected if you accept the relevant cookies.
- Client data: if you hire us, the details needed for the quote, the contract and the invoice (identification, address of the property, billing and payment details).
We do not ask for special category data (health, beliefs or similar). Please leave it out of your messages and photos.
If you send us photos or details that include other people, you must have their permission.
3. Why we use your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your quote request, calling or writing to you and arranging the visit | Pre-contractual steps at your request (Art. 6(1)(b) GDPR) |
| Dealing with enquiries you send by WhatsApp, phone or email | Pre-contractual steps at your request (Art. 6(1)(b) GDPR) |
| Carrying out the contracted work, keeping you updated and honouring the guarantee | Performance of the contract (Art. 6(1)(b) GDPR) |
| Issuing invoices and meeting tax and accounting obligations | Legal obligation (Art. 6(1)(c) GDPR) |
| Sending you High Designs news and offers by email | Your consent, given by ticking the specific box (Art. 6(1)(a) GDPR and Art. 21 LSSI-CE) |
| Measuring website use with Google Analytics | Your consent, through the cookie banner (Art. 6(1)(a) GDPR) |
| Measuring and showing you advertising with Google Ads and the Meta pixel | Your consent, through the cookie banner (Art. 6(1)(a) GDPR) |
| Publishing your review or photos of your renovation on the website or social media | Your consent, which we ask for separately (Art. 6(1)(a) GDPR) |
| Protecting the website against attacks and fraudulent use | Legitimate interest in the security of the site (Art. 6(1)(f) GDPR) |
Mandatory fields in the form are marked. Without them we cannot prepare your quote.
We make no automated decisions with legal effects on you.
4. How long we keep it
| Data | Period |
|---|---|
| Quote requests that do not lead to a contract | 12 months from the last contact |
| Client and completed project data | For as long as the relationship lasts and, afterwards, the legal periods: 4 years for tax purposes, 6 years for accounting and commercial records, and the guarantee and liability periods for the work |
| Data for marketing emails | Until you unsubscribe or withdraw your consent |
| Published reviews and photos | Until you withdraw your consent |
| Analytics data (Google Analytics) | 14 months |
| Cookies | The periods shown in the Cookie policy |
After these periods, the data is deleted or anonymised.
5. Who we share your data with
We do not sell your data. It is only accessed by the providers we need to deliver the service, under a data processing agreement:
| Provider | What for | Location |
|---|---|---|
| Hostinger International Ltd. | Website and email hosting | Cyprus (EU) |
| HubSpot Ireland Ltd. | Managing enquiries and clients (CRM) and sending emails | Ireland (EU), with possible access from the US |
| Celonis s.r.o. (Make) | Automatically sending form requests to the CRM | Czech Republic (EU) |
| Google Ireland Ltd. | Web analytics (Google Analytics) and advertising (Google Ads) | Ireland (EU), with possible access from the US |
| Meta Platforms Ireland Ltd. | Measurement and advertising on Instagram and Facebook (Meta pixel) | Ireland (EU), with possible access from the US |
| WhatsApp Ireland Ltd. | WhatsApp Business conversations | Ireland (EU), with possible access from the US |
| Defiant Inc. (Wordfence) | Website security | US |
The following may also access the data they need:
- Our team and the tradespeople working on your project, only if you hire us.
- Our accountants and banks, for invoicing and payments.
- Public authorities and courts, where the law requires it.
For advertising with the Meta pixel, Meta Platforms Ireland Ltd. acts as joint controller for the collection and transmission of the data. You can also exercise your rights with Meta.
6. Transfers outside the European Union
Some of these providers belong to groups based in the United States and may process data there. These transfers rely on the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023), to which they are certified, and on the standard contractual clauses approved by the European Commission.
You can ask us for more information about these safeguards at info@highdesignscompany.com.
7. Your rights
You can exercise these rights at any time, free of charge:
- Access: find out what data we hold about you.
- Rectification: correct anything inaccurate.
- Erasure: ask us to delete it.
- Objection: ask us to stop processing it, for example for advertising.
- Restriction: ask us to keep it without using it in certain cases.
- Portability: receive it in a commonly used electronic format.
- Withdrawal of consent: without affecting processing carried out up to that point.
Email info@highdesignscompany.com with the subject “Data protection” and tell us which right you wish to exercise. If we have doubts about your identity, we will ask you to confirm it. We will reply within one month at most.
To stop receiving marketing emails, use the unsubscribe link in each message. To change your cookie choices, use the “Cookie settings” link in the footer.
If you feel we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. WhatsApp and social media
If you message us on WhatsApp, Instagram or Facebook, those platforms also process your data under their own privacy policies. We use the conversation only to help you.
9. Under-18s
Our services are intended for people aged 18 or over. We do not knowingly collect data from minors. If we find that a minor has sent us data, we will delete it.
10. How we protect your data
We apply technical and organisational measures appropriate to the risk: encrypted connection (HTTPS), restricted access to our tools, backups and providers with security guarantees.
11. Changes to this policy
We may update this policy if the website, the tools we use or the law change. We will publish the new version on this page with its date. If the change affects processing based on your consent, we will ask for it again.
This English version is provided for your convenience. If the two versions differ, the Spanish version prevails.