Privacy Policy

Scope

This Privacy Policy applies to personal data processed by ROMEXPRESS REFORM S.L. when you visit romexpress-reform.com, contact us by email or other channels, request a quote or site visit, or engage us for interior renovation and repair work in Spain. It does not cover third-party websites linked from our pages.

Who we are

The data controller is ROMEXPRESS REFORM S.L., C/ Luis Missión, 26, Planta 0, 28039 Madrid (Madrid), Spain. For privacy-related requests, email romexpressreform@gmail.com. We respond to rights requests without undue delay and, in any event, within the time limits required by applicable law.

Categories of data we collect

Depending on how you interact with us, we may process the following categories of personal data:

• Identity and contact data — name, email address, telephone number, postal address, and similar details you provide when enquiring or contracting work.
• Project and property data — descriptions of rooms, photos, videos, dimensions, access instructions, material preferences, budgets discussed, and correspondence about scope and scheduling.
• Commercial and billing data — quotes, order references, invoices, payment status, and records needed for accounting or tax compliance where a project proceeds.
• Technical and usage data — IP address, browser type and version, device identifiers, operating system, language settings, pages viewed, time on page, referral URLs, and approximate location derived from IP.
• Cookie and preference data — choices stored when you accept or decline cookies, and identifiers used to remember those choices.
• Communications metadata — dates, subjects, and parties to emails or messages, where needed to manage enquiries and projects.

We do not routinely collect special categories of data (such as health information). If you voluntarily share sensitive information relevant to access or safety on site, we will use it only for the purpose you intended and where we have a valid legal basis.

How we collect data

Personal data comes from:

• Information you submit through email, phone, or messages when contacting us.
• Details you provide during office appointments, site visits, or video walkthroughs.
• Automatic technologies when you browse our website (see Cookies below).
• Professional partners or suppliers only where relevant to your project and permitted by law or contract.

Purposes and legal bases

We process personal data for the purposes below. Where the GDPR applies, we rely on the legal bases indicated.

• Enquiries and pre-contract steps — to answer questions, assess feasibility, and prepare estimates (legal bases: consent where given, steps at your request before a contract, and legitimate interests in operating our business).
• Project delivery — to schedule work, coordinate trades, communicate on site, and complete agreed interior renovation services (legal bases: contract performance and legitimate interests).
• Administration and compliance — invoicing, record-keeping, warranty follow-up, and obligations under Spanish and EU law (legal bases: legal obligation and contract performance).
• Website operation and security — hosting, error monitoring, fraud prevention, and maintaining site functionality (legal bases: legitimate interests and, for non-essential cookies, consent).
• Improvement — understanding aggregated use of our website to improve content and usability when analytics are enabled (legal basis: consent where required).

We do not use your personal data for fully automated decision-making that produces legal or similarly significant effects without human involvement.

Site visits and on-site work

When we visit a property, we may process contact details, access codes or key-holder information you provide, and notes or images documenting conditions relevant to the quoted work. We ask that you inform us of hazards, occupied areas, and privacy expectations. We use this information solely to plan and perform renovation services safely and as agreed.

Retention

We keep personal data only as long as necessary for the purposes described above, including:

• Enquiry records — typically for a reasonable period after the enquiry closes so we can respond to follow-up questions, unless a longer period is needed for a live project.
• Project and contract files — for the duration of the project and thereafter for warranty, quality, and dispute-management purposes.
• Financial and tax records — for the periods required under Spanish commercial and tax law.
• Cookie consent — for the lifetime of the cookie or as configured by our systems.
• Website logs — for a limited period appropriate to security and diagnostics, then deleted or anonymised.

When retention ends, we delete or anonymise data using measures proportionate to the sensitivity and format of the information.

Recipients and processors

We do not sell personal data. We may share information with:

• Hosting, email, cloud storage, and IT support providers acting as processors under data-processing agreements.
• Professional advisers (for example accountants or lawyers) where necessary and subject to confidentiality.
• Subcontractors involved in your project, limited to what they need to perform their task on site or supply materials.
• Public authorities when required by law, court order, or to protect vital interests.

A list of main processor categories is available on request. We require processors to implement appropriate security and to process data only on our documented instructions.

International transfers

Our website and some providers may process data outside the European Economic Area. Where transfer is necessary, we implement safeguards recognised under applicable law — such as adequacy decisions, Standard Contractual Clauses, or equivalent mechanisms — and assess transfer risks as required.

Cookies and similar technologies

Cookies are small text files stored on your device. We use:

• Essential cookies — required for basic site operation and to store your cookie banner choice. These do not require consent under typical EU interpretations but you may block them via browser settings at the cost of reduced functionality.
• Analytics cookies (if enabled) — help us measure aggregated traffic and page performance. We use these only after you accept them via our cookie banner.

You can change non-essential cookie preferences by clearing site data and revisiting the banner, or by adjusting browser settings. For more detail on browser controls, consult your browser’s help pages.

Marketing

We do not sell your contact details. If we ever send project-related updates or service information by email, you may opt out at any time using the unsubscribe link or by contacting us. Transactional messages about an active enquiry or project may still be sent as necessary.

Your rights

If you are in the European Economic Area or a jurisdiction with similar rules, you may have the right to:

• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure in certain circumstances.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests, including profiling tied to those interests.
• Receive data you provided in a structured, commonly used format where processing is automated and based on consent or contract (data portability).
• Withdraw consent at any time where processing is consent-based, without affecting prior lawful processing.

To exercise these rights, email romexpressreform@gmail.com with enough information to identify you and describe your request. We may need to verify your identity before responding. You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at aepd.es or your local supervisory authority.

Security

We implement appropriate technical and organisational measures — including access controls, secure communication where practicable, and staff awareness — to protect personal data against unauthorised access, alteration, disclosure, or destruction. No method of transmission over the internet or electronic storage is completely secure; we encourage you to use strong passwords on your own accounts and to avoid sending unnecessary sensitive data by unsecured channels.

Children

Our website and renovation services are intended for adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will take steps to delete it where appropriate.

Changes to this policy

We may update this Privacy Policy when our practices, services, or legal requirements change. The current version is always available on this page. Where changes materially affect how we use personal data, we will provide additional notice when required by law. Continued use of the website after changes constitutes acknowledgement of the updated policy where permitted by law.

Contact

Questions about this Privacy Policy or your personal data: romexpressreform@gmail.com or C/ Luis Missión, 26, Planta 0, 28039 Madrid (Madrid), Spain.