Privacy policy
Last updated: 2026-10-27.
Data controller: Albert López Casas, Tax ID 40457608X, Carrer Nicaragua, 08029 Barcelona. Email: contacto@welop.es.
What data is processed and why
Three kinds of data. What you send us through the forms (name, email, phone if you leave one, details of your business and whatever you write), by WhatsApp or by email, to prepare the demo you request and reply to you. Our clients' data, to provide the service they have signed up for and invoice it. And what the businesses we propose a website to publish themselves, to show them that proposal (explained below).
Legal basis
Your consent when you send a form, which you can withdraw at any time. Performance of the contract with our clients and the tax and accounting obligations it involves. And, for the information businesses publish, our legitimate interest in offering them our services.
Information businesses publish
To prepare a sample website and write to a business we use what that business publishes: trading name, address, phone, opening hours, email, website, social media profiles, reviews, photos with nobody in them and, when it appears on the shop sign or in a public register, the name of the owner. It comes from their Google profile, their website, their social media, OpenStreetMap and public registers such as the Spanish medicines agency's (AEMPS) list of pharmacies authorised to sell online. We only use it to contact that business and show it its proposal, and we don't share it with anyone. You can object at any time by writing to contacto@welop.es: we take the sample down and don't write to you again.
Visits and clicks on the site
We measure visits and clicks on the contact buttons with Vercel Web Analytics. It sets no cookies, stores nothing on your device and does not identify you: it counts page views and actions, along with the country, the page you came from, the browser and the type of device, with no data that would let anyone recognise you from one visit to the next. We do it to know what works on the site and improve it, which is our legitimate interest.
WhatsApp and email
The WhatsApp and email buttons open those apps. What you write is also handled by WhatsApp (Meta) or your email provider under their own terms. We only keep the conversation to reply to you.
How long it is kept
A requested demo is deleted 7 days after it is sent if you don't sign up. Contact details are kept for up to one year if we don't end up working together. What a business publishes, for up to two years from the last contact; if it asks to be removed, we keep only the minimum needed not to write to it again. Clients' data, for as long as the contract lasts and then for the periods set by tax and commercial law.
Who it is shared with
Nobody, for commercial purposes. We rely on providers acting as data processors: Vercel (website hosting and visit measurement), Resend or FormSubmit (sending the forms) and the provider of the welop.es mailboxes. Beyond them, data is only disclosed when the law requires it.
International transfers
Some of these providers are in the United States and rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses. If someone on the team accesses the data from outside the European Economic Area, they do so with the same safeguards.
Your rights
Access, rectification, erasure, objection, restriction and portability, and withdrawing your consent, by writing to contacto@welop.es. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).