Privacy policy

Last updated: <effective date: TBD>

This policy explains what personal data SpainVisaGuide collects, why, where it is kept, and the rights you have over it. We keep it plain on purpose.

Who we are

SpainVisaGuide is operated by <legal entity: TBD>, <registered address: TBD>. We are the data controller for the personal data described here. For any privacy question, or to exercise a right below, email [email protected].

What we collect, and why

When you only read the site

You can read every guide, the requirements pages, consulate pages, and service comparisons without an account and without giving us anything. We measure traffic with Plausible Analytics, which is cookieless and collects no personal data, only aggregate counts (page views, referrers, country). It does not track you across sites or build a profile. See the cookie policy for the full picture.

When you create an account

Accounts <pending: ships with accounts epic> let you turn a requirements page into a checklist you can work through. When that ships, creating an account will store your email address, a securely hashed password, your display name, and your language preference. The checklist itself stores only the status of each step, the dates you enter, and any notes you write.

Where your data is stored

The site and its database run in the European Union (our host, Sevalla, in an EU region). Your account data stays in the EU. Some services we link to (analytics, and the partners behind affiliate links) are run by their own companies under their own policies; where GA4 or a partner cookie is involved, it is only set after you consent (see cookies).

Our legal bases (GDPR)

• Contract: running your account and the checklists you create.
• Consent: analytics and affiliate cookies that are not strictly necessary, set only after you agree.
• Legitimate interest: keeping the site secure and understanding aggregate traffic through cookieless analytics.

Cookies and analytics

Plausible runs with no cookies and needs no consent. Google Analytics 4 and affiliate cookies are switched off until you accept them. The full list, and how to change your mind, is in the cookie policy.

Affiliate links

Some outbound links to services (insurance, banking, legal, translation, apostille) are affiliate links: if you buy through one we may earn a commission at no extra cost to you. When you click one, a record of the click is logged so a partner can credit us. That record is not tied to your identity, and it is anonymized rather than deleted if you close your account. The affiliate disclosure explains the arrangement in full.

Your rights

Under the GDPR you can ask us to:

• see the personal data we hold about you;
• correct anything that is wrong;
• delete your account and its data;
• receive your data in a portable format;
• object to, or restrict, a particular use;
• withdraw a consent you gave, at any time.

Once accounts ship, you will be able to export your data as JSON and delete your account yourself from your account settings <pending: ships with accounts epic>. Deleting your account removes your checklists, saved items, and CRM linkage; affiliate click records are anonymized, not left orphaned. Until self-service is live, email [email protected] and we will handle the request by hand.

You also have the right to complain to a data-protection supervisory authority. If you are in the EU, that is the authority in your country of residence.

How long we keep it

Account data is kept for as long as your account is open, and removed when you delete it. Aggregate analytics hold no personal data. Affiliate click records are retained in anonymized form for reporting.

Changes to this policy

When this policy changes in a way that matters, we will update the date at the top and, for a material change affecting account holders, tell you directly.