Legal
Privacy Policy
Last updated: July 29, 2026
Zpacio Lab ("Zpacio Lab", "we", "us", or "our") respects your privacy and is committed to protecting the personal data of everyone who visits this website or contacts us about our services. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you have over it.
1. Who is responsible for your data
The data controller is:
Zpacio Lab
Rambla de Catalunya 106, 08008 Barcelona, Spain
Email: info@zpaciolab.com
Phone: +34 624 625 229
For any question about this policy or about how your data is handled, contact us using the details above.
2. What data we collect
We only collect personal data that you choose to give us. In practice, this happens through our contact form, and may include:
- Full name
- Company or brand name
- Email address
- Phone number (optional)
- Service of interest and the details you share about your project
We do not use cookies for analytics or advertising, and we do not run any tracking pixels on this site. See our Cookie Policy for the limited local storage and third-party technology this site does use.
3. Why we process your data and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to your inquiry and discussing a potential project | Art. 6(1)(b) — steps taken at your request prior to entering into a contract |
| Managing an ongoing client relationship or contract | Art. 6(1)(b) — performance of a contract |
| Keeping business records for accounting, tax, and legal defense purposes | Art. 6(1)(c) and 6(1)(f) — legal obligation and legitimate interest |
| Preventing spam and abuse of our contact form | Art. 6(1)(f) — legitimate interest in the security of our services |
4. Who we share your data with
We do not sell your personal data. Submissions made through our contact form are delivered directly to our own inbox; we do not currently route them through any third-party form-processing service. We share data only with the limited categories of service providers below, under written agreements consistent with Art. 28 GDPR where applicable:
- Our website hosting and infrastructure providers, strictly to keep this site online and secure.
- Our email provider, strictly to receive and store the messages you send us.
- Professional advisors (e.g. accountants, lawyers) where necessary, and public authorities where required by law.
If we start using a third-party form-processing or CRM service in the future, we will name it here and, where required, update our Cookie Policy before any related cookie is set.
5. International data transfers
Because we work with clients and service providers outside the European Economic Area (including in the United States and the United Kingdom), your data may be transferred internationally. Whenever this happens, we rely on recognized safeguards such as the European Commission's Standard Contractual Clauses, the UK's International Data Transfer Addendum, or an applicable adequacy decision.
6. How long we keep your data
We keep inquiry and project data for as long as needed to manage our relationship with you, and afterwards for up to five years from our last contact, in line with general civil and commercial limitation periods in Spain, unless a longer period is required to comply with a legal, accounting, or tax obligation, or to defend against a legal claim.
7. Your rights
Under the GDPR (and UK GDPR, where applicable), you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data ("right to be forgotten"), subject to legal exceptions;
- Restrict or object to certain processing;
- Port your data to another provider in a structured, machine-readable format;
- Withdraw consent at any time, where processing is based on consent, without affecting prior lawful processing.
To exercise any of these rights, email us at info@zpaciolab.com. We will respond within one month, as required by the GDPR.
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD) — www.aepd.es. UK visitors may contact the Information Commissioner's Office (ICO) — ico.org.uk.
8. California residents
If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) gives you the right to know what personal information we collect, to request its deletion, and to opt out of its "sale" or "sharing." We do not sell or share personal data with third parties for cross-context behavioral advertising. You can exercise your rights by contacting us at info@zpaciolab.com.
9. Children's privacy
Our services are directed at businesses and professionals. We do not knowingly collect personal data from anyone under the age of 16.
10. Security
We apply appropriate technical and organizational measures to protect your data, including encrypted transmission (HTTPS/TLS) and restricted access to systems that hold personal data. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when it was last revised. We encourage you to review it periodically.
12. Contact
Questions about this Privacy Policy can be sent to info@zpaciolab.com or by post to Rambla de Catalunya 106, 08008 Barcelona, Spain.