Privacy policy

Last updated: 22 October 2026

This policy explains how we use personal data, in line with the EU General Data Protection Regulation (GDPR) and Spain's Organic Law 3/2018 (LOPDGDD).

Who is responsible for your data

Data controller: Kelly Pawlett (trading as Volcanic 5D Design)
NIE: Y3678960D
Location: Tenerife, Canary Islands, Spain
Contact: support@volcanic5ddesign.com

What data we collect

Contact form. When you send the contact form we receive your name, business name, email, phone/WhatsApp number (optional), the service you are interested in, your message and the language of the page you used.

WhatsApp, email and Facebook. If you contact us directly, we receive the details you choose to share, such as your name, number or email address and your message.

Technical data. Our hosting provider processes basic technical data (such as IP address, browser type and the pages requested) to deliver the website and keep it secure.

Why we use it and the legal basis

To reply to your enquiry and prepare a quote: steps taken at your request before entering into a contract (GDPR art. 6.1.b).
To provide the services you hire from us: performance of a contract (art. 6.1.b).
To keep the website secure and prevent spam: our legitimate interest (art. 6.1.f).
To keep invoices and accounting records: legal obligation (art. 6.1.c).

We do not sell your data, we do not use it for automated decision-making, and we only send you marketing if you ask for it.

How the contact form works (Netlify Forms)

This website is hosted by Netlify, Inc. Contact form submissions are collected and stored by Netlify Forms on our behalf and forwarded to us by email. Netlify acts as our data processor. Netlify is based in the United States, so your data may be transferred outside the European Economic Area. These transfers rely on the safeguards Netlify provides under the GDPR, such as the EU Standard Contractual Clauses. A hidden anti-spam field does not collect any extra data about you.

Who else receives your data

Netlify, Inc.: website hosting and contact form processing.
Our email provider: to receive and answer your emails.
WhatsApp / Meta: only if you choose to message us on WhatsApp or Facebook, under their own privacy policies.
Google: web fonts are loaded from Google Fonts, which receives your IP address to deliver them.
Tax advisers or public authorities, where the law requires it.

How long we keep it

Enquiries are kept for as long as needed to answer them and for up to 12 months afterwards if no contract follows. Client and invoicing data is kept for the periods required by Spanish tax and commercial law (generally 4 to 6 years).

Your rights

You can ask to access, correct or delete your data, object to or restrict its use, and ask for a copy in a portable format. You can withdraw any consent at any time. Email support@volcanic5ddesign.com. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD) at www.aepd.es.

Cookies and similar technologies

This website does not use analytics, advertising or tracking cookies, so we do not show a cookie banner.

Language preference: we save your EN/ES choice in your browser's local storage so the site remembers it. It stays on your device and is not used for tracking.
Google Fonts: fonts are loaded from Google's servers. Google receives your IP address but does not set cookies for this.
Google Maps (demo websites only): the Brisa Beach Café demo has a map that only loads if you click "Show map". Google may then set its own cookies, under Google's privacy policy.
Demo shop: the Marea Boutique demo keeps its sample cart in your browser's local storage. No order or payment is ever made.
Links to WhatsApp, Facebook and Google Play take you to those services, which use their own cookies.

You can clear local storage and cookies at any time in your browser settings.

Changes

We may update this policy. The date at the top shows the latest version.