Privacy Policy

1. Who is responsible for your data?

I am the controller responsible for your personal data:

In this policy, “I”, “me” and “my” refer to Laura van Leeuwen, trading as Spanish iGaming Studio.

2. Personal data I collect

Depending on how you interact with me, I may collect the following information:

• Contact information: your name, email address and any other contact details you provide.
• Business information: your company name, role and website, where relevant to your enquiry or project.
• Project information: messages, briefs, shared links, documents, instructions and other materials you send me.
• Order information: your selected service, content area, target market, requested deadline, number of pieces and word count, where the ordering feature is available.
• Billing information: information needed to prepare invoices and record payments, such as your billing name, address and tax identification number.
• Website technical data: the website host may process information such as your IP address, browser type, request date and time, requested page and error or security logs.

Please share only the personal data needed for your enquiry or project.

3. How and why I use your data

• Responding to enquiries and preparing quotes. Where you are a prospective client acting in your own name, this is necessary to take steps at your request before entering into a contract. For other business enquiries, I rely on my legitimate interest in responding to people interested in my services.
• Processing order requests. I use the information entered in the order form to review the requested service, scope, price and delivery requirements before providing the service.
• Providing services and managing projects. This is necessary to perform my contract with you. Where you represent a company, I rely on my legitimate interest in communicating with that company and delivering its projects.
• Issuing invoices and meeting accounting or tax requirements. I process the necessary information to comply with my legal obligations.
• Protecting the website and resolving technical problems. Technical information may be processed for security, fraud prevention, service availability and troubleshooting on the basis of legitimate interests.
• Resolving disputes and establishing or defending legal claims. I rely on my legitimate interest in protecting my business and legal rights.

Where I need information to prepare a quote, process an order, deliver a service or meet a legal requirement, I will explain this when requesting it. Without that information, I may be unable to proceed.

If I ask for your consent for a specific use of your data, you can withdraw it at any time. Withdrawal does not affect processing that was lawful before you withdrew consent.

4. Personal data in client materials

Documents supplied for translation, proofreading or content work may contain personal data about other people.

Where I process that data on a client’s behalf, I act as a processor and follow the client’s documented instructions and any applicable data processing agreement. The client remains responsible for determining the purpose and legal basis of that processing.

5. Who receives your data?

I share personal data only where necessary to operate my business, deliver the agreed services or meet legal requirements.

• GitHub Pages: this website is hosted through GitHub Pages. GitHub may process technical data needed to deliver, protect and maintain the website. You can read the GitHub Privacy Statement.
• Google Fonts: this website currently obtains font files from Google. Your browser may send technical request data, including your IP address, to Google when loading those fonts. You can read the Google Privacy Policy.
• Business service providers: email, secure file storage, invoicing or accounting providers may process relevant information when needed for an enquiry, project or legal obligation.

Where a provider processes personal data on my behalf, I require appropriate contractual protections and limit its processing to the relevant purposes.

I may also disclose relevant information to public authorities where legally required, or to professional advisers where necessary to meet my obligations or address a legal claim.

6. International transfers

Some service providers may store or access personal data outside the European Economic Area. Where this happens, I rely on a valid transfer mechanism, such as an applicable adequacy decision or Standard Contractual Clauses, together with any additional safeguards required by data protection law.

You may contact me if you would like more information about the safeguards relevant to your personal data.

7. How long I keep your data

• Enquiries that do not become projects: generally up to 18 months after our last substantive contact.
• Project correspondence and working files: generally up to three years after the project is completed, unless we agree a different period or earlier deletion is appropriate.
• Invoices and accounting records: for the periods required by applicable tax and accounting law.
• Records needed for legal claims: until the relevant limitation period expires or an ongoing dispute is resolved.
• Technical logs: according to the retention periods applied by the website host for security and service operation.

When information is no longer needed, I delete it or anonymise it. Where the law requires me to retain or restrict particular records, I limit their use accordingly.

8. Cookies and similar technologies

This website does not currently use analytics cookies, advertising cookies or similar tracking technologies. It does not use analytics or advertising tools to build profiles of visitors.

The website loads Google Fonts from Google’s servers, as explained in section 5, but Spanish iGaming Studio does not use those font requests to track visitors.

If cookies or similar technologies requiring consent are added in the future, this policy will be updated and an appropriate consent mechanism will be displayed before they are activated.

9. Security

I use technical and organisational measures appropriate to the personal data I handle to protect it against unauthorised access, loss, alteration or disclosure.

No website, email service or storage system is completely secure. I therefore cannot guarantee absolute security.

10. Your rights

Under applicable data protection law, you may have the right to:

• Access your personal data and receive a copy.
• Correct inaccurate or incomplete data.
• Request deletion of your data.
• Restrict how I use your data.
• Receive data in a portable format, where applicable.
• Object to processing based on legitimate interests.
• Withdraw consent where processing relies on it.

To exercise your rights, email laura@spanishigamingstudio.com. I may request information reasonably necessary to verify your identity.

You can also lodge a complaint with the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.

I do not use your personal data to make decisions based solely on automated processing that produce legal or similarly significant effects on you.

11. Links to other websites

This website may contain links to third-party websites. Those websites handle personal data under their own privacy policies. Please review them before providing personal information.

12. Changes to this policy

I may update this policy to reflect changes to my services, data practices or legal obligations. The latest version will appear on this page with its updated date.

Where required, I will notify you of significant changes before they take effect.

13. Contact

For questions about this policy or how I handle your personal data, contact me at: