Privacy Policy
Last updated: 25 April 2026
This Privacy Policy explains how Clawal (the data controller) processes personal data of people who visit clawal.io or contact us.
1. Who we are
Controller: Jose Alejandro Godoy Jerez (operating as an autónomo / self-employed professional in Spain), trading as Clawal.
Tax ID (NIF/NIE): [Your NIF here].
Registered address: [Your registered address here].
Contact: jagjerez2015@gmail.com.
2. Data we collect
Contact form data: your name, email address, optional company name, and the message you write.
Booking data: when you schedule a call via Calendly, Calendly collects the data needed to schedule (name, email, time slot). See Calendly's own privacy notice.
Analytics data: if you accept analytics cookies, Google Analytics 4 collects anonymised usage information (pages viewed, approximate location at city level, device type, referrer).
3. Why we process it (purposes & legal basis)
Replying to enquiries — legal basis: pre-contractual measures at your request (Art. 6(1)(b) GDPR).
Scheduling calls via Calendly — legal basis: pre-contractual measures (Art. 6(1)(b) GDPR).
Analytics — legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the cookie preferences link in the footer.
Tax and accounting records when an engagement starts — legal basis: legal obligation (Art. 6(1)(c) GDPR).
4. Who receives your data
Resend (email delivery for the contact form) — processor based in the EU/US, GDPR-compliant.
Vercel (website hosting and edge delivery) — processor based in the US, with EU data processing addendum.
Google Ireland Ltd. (Google Analytics) — only if you accept analytics cookies.
Calendly LLC — only if you choose to schedule a call.
We do not sell personal data and we do not use it for advertising.
5. International transfers
Some processors are based outside the EEA. Where that is the case, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
6. Retention
Contact form messages: kept for up to 24 months from last contact, then deleted.
Engagement records (contracts, invoices): kept for the legally required retention period under Spanish tax and commercial law (currently up to 6 years).
Analytics data: retained per the GA4 default of 14 months.
7. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise these rights, email jagjerez2015@gmail.com. We will respond within 30 days.
You can also lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
8. Changes
We may update this policy. The date at the top reflects the latest revision.