Privacy policy | Vecino Fix

1. Who is responsible for your data

Controller: Vecino Fix (trading as Vecino Fix)
NIF: TODO: NIF
Address: 03183 Torrevieja (Alicante), Spain
Contact for privacy questions: [email protected]

2. What data we collect

WhatsApp, phone and email: your name, phone number, messages, photos and videos you send us, and the address of the property where you want work done.
Call-back form: your name, phone number, area and message. The form is delivered to us by Web3Forms.
Jobs and invoices: the work done, before-and-after photos, prices, payments and invoice details (including your NIF/NIE if you ask for it on the invoice).
Home Care members: property details, access instructions, key code (never linked to your address on the key itself), inspection reports and photos.

3. Why we use it, and on what legal basis

To answer your enquiry and give you a quote: steps taken at your request before a contract (GDPR art. 6.1.b).
To carry out the job or your Home Care membership, including key holding and reports: performance of a contract (art. 6.1.b).
To issue invoices and keep accounting and tax records: legal obligation (art. 6.1.c).
To handle guarantee claims and complaints: contract and legitimate interest (art. 6.1.b and 6.1.f).
To know which of our adverts work and how quickly we answer: we log each enquiry and job (date, phone number, how you found us, service, price, reply time and outcome) in a spreadsheet only the two founders can open. Legitimate interest (art. 6.1.f).
To see how visitors use this website (Google Analytics): only if you tap Accept on our cookie banner (art. 6.1.a and art. 22.2 LSSI). You can withdraw that consent at any time.
To send occasional news or offers on WhatsApp: only with your consent (art. 6.1.a), which you can withdraw at any time.
We only use photos of your home in our marketing if you give us explicit permission, and never with your address.

4. Who we share it with

We never sell your data. We share it only when needed with:

Tradespeople working for us on your job (only what they need to do the job).
Service providers who process data for us: WhatsApp (Meta), Web3Forms (contact form), Cloudflare (website hosting and cookieless statistics), Google (the spreadsheet where we log enquiries and jobs, and Google Analytics if you accept it; Google Ireland Ltd), our email provider TODO: email provider, our invoicing software TODO: invoicing software and our accountant (gestor).
Tax authorities and courts, when the law requires it.

Some of these providers may process data outside the European Economic Area. In that case, transfers are protected by European Commission adequacy decisions (such as the EU-US Data Privacy Framework) or standard contractual clauses. TODO: verify each provider's transfer mechanism

5. How long we keep it

Enquiries that do not become a job: up to 12 months.
The enquiry and job spreadsheet: an enquiry that never became a job is deleted after 12 months; rows for jobs are kept for the customer and job data periods below.
Customer, job and invoice data: for as long as the law requires (generally 4 years for tax purposes and up to 6 years for accounting records).
Before-and-after photos: for the guarantee period plus 12 months, unless you agreed to their use in our marketing.
Home Care data: while you are a member and 12 months afterwards. Keys are returned when membership ends.
Google Analytics statistics: 14 months, then Google deletes them.

6. Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, to receive it in a portable format, and to withdraw consent at any time. Write to [email protected]. We reply within one month.

If you are not happy with our answer, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

7. Cookies and statistics

We use Google Analytics to see how visitors use this website (which pages they read and how they move between them), so we can improve it. It runs only if you tap Accept on our cookie banner. Until then, and if you tap Reject, nothing is sent to Google. With your consent, Google Analytics sets two cookies, _ga and _ga_<ID>, which keep a random identifier for up to 2 years. We do not use Google's advertising features. We remember your choice in your browser (vf-consent) so we do not ask again. To change your mind, use Cookie settings at the bottom of every page. Choosing Reject there deletes the Google Analytics cookies.

Everything else works without cookies. We use Cloudflare Web Analytics, which counts visits without cookies and without identifying you. When you arrive from one of our flyers, a short code in the web address (for example ?src=flyer-zenia) is added to your WhatsApp message so we know which flyer worked. It is not stored on your device. We also count, on Cloudflare's servers, how many people arrive through each of our links and how many tap a WhatsApp button, together with the country of the request. These are totals only: no IP address, no device details and nothing that identifies you.