Last updated: 21 April 2026
Applies to: urbanwebcreation.com
Controller: Urban Web Creation, Partaloa, Almeria, Spain
1. Who We Are
Urban Web Creation ("we", "us", "our") is a web design and hosting business based in Partaloa, Almeria, Spain. We operate the website at www.urbanwebcreation.com.
For any privacy-related queries, you can contact us at: enquiries@urbanwebcreation.com
2. What Data We Collect
We only collect data that you voluntarily provide to us or that is automatically collected when you visit our website.
Data you provide:
- Your name, email address, and phone number (when you submit a contact form)
- Your business name and any details you include in your message
- Your chosen hosting plan interest
Data collected automatically:
- IP address (logged server-side when you submit a form, for spam prevention only)
- Browser type and device type (via standard server logs)
- Pages visited and time spent (if analytics is enabled — see Section 6)
3. Why We Collect Your Data
We use your personal data for the following purposes:
- To respond to your enquiry — when you contact us via the website form, we use your details to reply to you
- To provide our services — if you become a client, we use your contact details to manage your hosting and website account
- To prevent spam and abuse — IP addresses are used for rate limiting on our contact form
- To improve our website — anonymised analytics help us understand how visitors use the site
We do not use your data for automated decision-making or profiling.
4. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your data on the following legal bases:
- Consent — you tick the consent checkbox before submitting our contact form
- Legitimate interests — for security measures such as spam prevention
- Contract performance — where processing is necessary to deliver the services you've signed up for
5. How Long We Keep Your Data
- Contact form enquiries are kept for up to 2 years from the date of submission, or until you ask us to delete them
- Active client data is retained for the duration of the hosting relationship, plus 12 months after it ends
- Server logs (including IP addresses) are automatically deleted after 90 days
6. Analytics
If we use Google Analytics or a similar tool on this website, it may collect anonymised data about how visitors use the site (pages viewed, time on site, general location). This data does not personally identify you. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.
7. Cookies
Our website currently uses only a session cookie to support the contact form's spam rate-limiting. This cookie contains no personal information and is deleted when you close your browser.
If we add analytics or other third-party tools in the future, we will update this policy and add a cookie consent notice.
8. Who We Share Your Data With
We do not sell, rent, or share your personal data with third parties for marketing purposes.
We may share data with:
- Hostinger (our hosting provider) — your data is stored on their servers under their own data processing agreements
- Legal authorities — only if required to do so by law
9. Your Rights Under GDPR
As a data subject under GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data ("right to be forgotten")
- Restriction — ask us to limit how we process your data
- Portability — request your data in a machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — at any time, where consent was the basis for processing
To exercise any of these rights, email us at enquiries@urbanwebcreation.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Spanish data protection authority (AEPD) at www.aepd.es.
10. Data Security
We take reasonable technical and organisational measures to protect your data, including:
- HTTPS encryption on all pages (SSL certificate)
- Input sanitisation on all form fields
- No storage of payment card data (we do not process payments directly)
No method of transmission over the internet is 100% secure, but we take data security seriously and keep our practices up to date.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us: