Skip to main content
Pedro Alizo

Privacy Policy

Last updated: October 17, 2026.

Data controller: Pedro Alizo (Madrid, Spain). For privacy requests, use [email protected]. I aim to respond to access, correction, and deletion requests within 30 days.

Data Collected

  • Contact form fields: name, email, subject, message; for role conversations also company, role title, and optional LinkedIn URL.
  • Email address submitted to the optional newsletter form.
  • An analytics-consent choice stored in your browser's local storage under the key site_analytics_consent.
  • Basic technical data from analytics providers listed below—only when configured for this deployment and you have accepted analytics.

How Data Is Processed

  • Contact form submissions are processed through Web3Forms to deliver messages to the site inbox.
  • Newsletter submissions are sent to Buttondown , the provider currently configured for this site (“Tie-Out”).
  • I do not use contact-form data for unrelated marketing lists without separate consent.

Retention

  • Contact messages: retained in the Web3Forms inbox and any email follow-up thread for up to 24 months after the last reply, then deleted or anonymized unless a longer period is required for an ongoing professional discussion you initiate.
  • Newsletter: your email is retained by Buttondown until you unsubscribe or request deletion. Unsubscribe links appear in every issue.
  • Analytics consent: the local-storage preference remains until you clear site data or change the choice.
  • Analytics events: when enabled and consented, event retention follows the active provider property settings (typically 14–26 months for GA4; Plausible retains aggregated stats for the life of the site account).

Providers, Locations, and Transfers

This site is hosted on Cloudflare Pages. Form and newsletter processing use third-party processors that may store data in the United States or other regions outside the EEA. Where transfers occur, they rely on the provider’s published safeguards (for example Standard Contractual Clauses or equivalent mechanisms described in their privacy documentation).

  • Cloudflare (hosting/CDN) — privacy policy .
  • Web3Forms (contact delivery) — privacy policy . Processes form fields to relay messages.
  • Buttondown (newsletter) — privacy policy . Stores subscriber email and delivery metadata.
  • Analytics (this deployment): Neither Google Analytics nor Plausible is configured via environment variables for this build, so analytics scripts are not loaded. If a future deployment sets PUBLIC_GA_ID and/or PUBLIC_PLAUSIBLE_DOMAIN, those providers load only after consent.

Legal Basis (GDPR)

  • Legitimate interest: responding to inbound professional inquiries.
  • Consent: optional analytics and newsletter interactions where explicitly presented.

Analytics and Local Storage

  • Analytics scripts are configured only for production and are loaded only after analytics consent is granted.
  • The consent choice is stored in local storage ( site_analytics_consent) so the banner can remember your selection. Theme preference may also be stored under theme.

Your Rights

You can request access, correction, or deletion of your personal data by emailing [email protected]. I aim to respond within 30 days. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

Contact

For privacy questions, contact [email protected].