Privacy Policy

This policy explains how Morales Studio ("we", "us") processes personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR and the UK Data Protection Act 2018.

1. Data controller

Morales Studio, operated by Mireija Maria Carrera Morales, is the data controller. Address: Avenida El Corregidor 19, 11638 Arcos de la Frontera (Cádiz), Spain. Email: hello@morales-studio.online. Phone: +34 677 943 401.

2. Data we collect

• Contact details you provide (name, email, company).
• Project information and messages you send us.
• Billing details needed to issue invoices.
• Technical data such as IP address and browser type, collected for security.

3. Purposes and legal bases

• Responding to enquiries — your consent and steps prior to a contract (Art. 6(1)(a) and (b)).
• Delivering services and invoicing — performance of a contract and legal obligation (Art. 6(1)(b) and (c)).
• Website security — our legitimate interests (Art. 6(1)(f)).

4. Retention

Enquiries are kept for up to 12 months if no contract follows. Contract and accounting records are kept for the period required by tax law (typically 6–10 years).

5. Sharing and international transfers

We share data only with trusted processors (hosting, email, accounting) under data processing agreements. Transfers outside the EEA/UK rely on adequacy decisions, Standard Contractual Clauses or the UK International Data Transfer Addendum.

6. Your rights

You have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. Contact us at hello@morales-studio.online; we respond within one month.

7. Complaints

In Spain, you may complain to the Agencia Española de Protección de Datos (aepd.es). You may also complain to your local EU supervisory authority or, in the UK, to the Information Commissioner's Office (ico.org.uk).

8. Cookies

We use strictly necessary cookies and local storage (for example, to remember your cookie choice). Optional analytics cookies are set only if you click "Accept all" in our cookie banner, in line with the ePrivacy Directive, the Spanish AEPD cookie guidance and UK PECR. You can change your choice at any time with the "Cookie settings" link in the footer.