Privacy policy

Data controller

What data we process, and why

• Contact form: name, email address and the content of your enquiry. Purpose: to reply to you and, if requested, to manage the purchase of the bundle or a custom adaptation. Legal basis: consent (art. 6.1.a GDPR) and pre-contractual steps (art. 6.1.b GDPR).
• Purchases: payment is handled on the Lemon Squeezy platform, which acts as merchant of record and controller for payment data. We receive only the data needed for product support (email and product purchased). See the Lemon Squeezy privacy policy.
• Email support: emails you send us are kept for as long as the support relationship lasts.

Recipients and processors

Form submissions are processed on an automation instance (n8n) hosted on a private server under the controller's control, within the European Union. We do not sell or share your data with third parties. Fonts are loaded from Google Fonts, which involves a technical request to Google's servers (IP address).

Retention

Enquiries: up to 12 months after the last communication. Data linked to purchases: for the periods required by tax legislation.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to hola@industriakit.com. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority.

Security

We apply reasonable technical measures: TLS encryption on forms and downloads, an anti-spam honeypot field, data minimisation and restricted access to the server that receives submissions. Payments never pass through our servers.