Legal
Privacy Policy
1. Controller
The controller responsible for your personal data is Mohamad Feras Akad Kosibati, NIF 26636314-Z, with address at Avenida Blasco Ibáñez 97, 46022 Valencia, Spain. Contact: support@makedgelab.com. Data Protection Officer, if appointed: none appointed.
2. Data we collect
Depending on how you use the Services, we may process your name, email address, telephone number, organisation, account and enquiry details, communications, device and log data, cookie identifiers, preferences and the response you give to the trader-profile question. We do not ask for special-category data or payment credentials through this website.
The contact form specifically: it collects the topic you choose, your name, your email address and your message. That is sent to us by email so we can reply. The website does not keep a copy — there is no database of enquiries behind it. To limit automated abuse we count recent submissions per connection, storing your IP address only in an irreversible hashed form, which lets us count without identifying you.
3. Purposes and legal bases
- To respond to enquiries and provide requested access: steps prior to a contract or performance of a contract.
- To operate, secure, troubleshoot and improve the website: our legitimate interests, balanced against your rights.
- To record aggregate statistics about trader-profile responses: legitimate interests or consent where required. The response is not used to deny access, make an investment decision or assess your creditworthiness.
- To send marketing communications: your consent, or another lawful basis permitted by applicable law. You can withdraw consent at any time.
- To meet legal, regulatory, accounting and fraud-prevention duties: compliance with a legal obligation or legitimate interests.
4. Recipients and international transfers
We share personal data with providers who act on our instructions as our processors — hosting, email delivery, form handling, security and professional advisers — and with authorities where legally required.
Paddle is not one of them. You do not buy from us: Paddle.com Market Limited (company number 8172165, England and Wales), or another Paddle company depending on where you buy from, is the Merchant of Record and the seller named on your invoice. For the sale itself — payment, billing details, tax calculation and remittance, invoicing and fraud prevention — Paddle decides how and why your data is processed and acts as an independent controller in its own right, not on our instructions. That processing is governed by Paddle’s privacy notice, and you exercise your rights over it against Paddle directly. We never receive your card details or any payment credentials.
After a purchase, Paddle passes us a limited set of data — a customer identifier and your email address — so that we can deliver the file you bought, issue your licence and answer support requests. For that data we are the controller, and everything else in this Policy applies to it.
Some recipients process data outside the European Economic Area. Where that happens we rely on an adequacy decision, the European Commission’s Standard Contractual Clauses or another lawful safeguard under Chapter V GDPR. The current provider list and safeguards are available from support@makedgelab.com.
5. Retention and security
We keep personal data only for as long as necessary for the stated purpose, legal obligations and dispute resolution. Enquiry data is retained for 12 months from our last reply; marketing data until consent is withdrawn or the data is no longer needed; delivery records and order files for 12 months from their last activity, and the anti-abuse records behind our contact form for 30 days. These are deleted automatically. We use appropriate technical and organisational measures, but no online system is completely secure.
6. Your GDPR rights
Subject to applicable limitations, you may request access, rectification, erasure, restriction, portability or object to processing, including direct marketing. Where processing is based on consent, you may withdraw it at any time. To exercise a right, contact support@makedgelab.com. We normally respond within one month, subject to lawful extensions and identity checks.
You may also complain to the data-protection supervisory authority in your habitual residence, place of work or place of the alleged infringement. The relevant authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
7. Cookies and analytics
Strictly necessary technologies may be used to operate the Services. Non-essential analytics, advertising or preference technologies will be used only where required consent has been obtained. You can manage cookies through your browser and, where available, our consent tool. The website may contain third-party resources whose processing is governed by their own policies.
8. Children and automated decisions
The Services are not directed to children. We do not knowingly collect children’s personal data for marketing. We do not make decisions producing legal or similarly significant effects about you solely by automated processing. The trader-profile response is used only for aggregate service statistics and access is not conditional on choosing Yes or No.
9. Changes and contact
We may update this Policy when our processing or legal obligations change. The latest version will show its effective date. Questions and rights requests should be sent to support@makedgelab.com.