Privacy policy

Last updated: 27 September 2026

This English version is provided for convenience. In the event of any discrepancy, the Spanish version shall prevail.

This policy explains how we handle the personal data you provide through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. Data controller

• Controller: Adrián Arcas Querol (Capa Capa AyA)
• Email: adrianarcas80@gmail.com

2. What data we collect

• Contact form: your name, email address, type of enquiry and the content of your message.
• WhatsApp: if you message us on WhatsApp, your phone number, profile name and the content of the conversation.
• Orders: if you go on to place an order, the details needed to prepare and deliver it (for example, your delivery address).

We do not ask for any special category data. Please do not include it in your messages.

3. How we use it

• To reply to your enquiry.
• To prepare and send you a quote, if you request one.
• To handle your order, if you accept the quote.

We do not use your data to send you advertising or to build profiles, and we do not make automated decisions.

4. Legal basis

• Your consent (Art. 6(1)(a) GDPR), given when you submit the form or message us. You can withdraw it at any time.
• Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR), when you ask us for a quote.
• Performance of a contract (Art. 6(1)(b) GDPR), if you accept the quote and place an order.

5. How long we keep it

We keep data from enquiries that do not lead to an order for 12 months from our last contact. Order data is kept for the periods required by applicable law. After that, it is deleted.

6. Who else processes your data

We do not share your data with third parties unless required by law. To provide our service we rely on the following providers, who process data solely on our behalf:

• Formspree, Inc. (United States): receives messages sent through the form and forwards them to us by email. It keeps a copy in its dashboard for 30 days.
• Google (Gmail): the email service we use to receive and reply to messages.
• WhatsApp (Meta): if you choose to message us on WhatsApp.
• Cloudflare, Inc. (United States): hosts and serves the website. It does not receive form messages, but it technically processes visitors' IP addresses.

7. International transfers

Some of these providers are based in the United States. These transfers are made with the safeguards provided for in the GDPR:

• Formspree: Standard Contractual Clauses approved by the European Commission.
• Google: certified under the EU-U.S. Data Privacy Framework and, where required, Standard Contractual Clauses.
• Cloudflare: certified under the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
• WhatsApp: if you choose to contact us this way, the safeguards described in Meta's privacy policy apply.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, and withdraw your consent. To do so, email us at adrianarcas80@gmail.com stating which right you wish to exercise.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Children

This website is intended for adults (teachers, families and individuals). If you are under 14, please do not send us your details; ask a parent or guardian to contact us instead.

10. Cookies

This website does not use cookies. You can find more information in our cookie policy.