Legal
Privacy policy
Last updated: 11 June 2026
This policy describes how ModernShapeWorks S.L. (trading as ModernShapeWorks, "we", "us") collects, uses and protects personal data when you visit modernshapeworks.com (the "site") or engage us for services. We are the data controller for any personal data you provide.
This policy is written in plain English. If anything is unclear, write to us at hello@modernshapeworks.com and we'll explain.
1. Who we are
- Trading address: Carrer de Buenos Aires, 36, 17310 Lloret de Mar, Girona, Spain
- Company registration: CIF: B-12480967
- VAT: ES B12480967
- Contact: hello@modernshapeworks.com · +34 972 36 57 11
2. The data we collect
We collect personal data when you submit a contact form, start a checkout, sign up to Continuum, or correspond with us by email or phone. Specifically:
| Data | When collected | Why we hold it |
|---|---|---|
| Name (first & last) | Contact form, checkout, project intake | To address you and identify the engagement |
| Email address | Contact form, checkout, billing | To reply, send proposals, issue receipts/invoices |
| Phone number | Contact form, checkout | To call you when email isn't the right channel |
| Country & billing address | Checkout, invoicing | To determine VAT obligations and produce a valid invoice |
| Company / project name | Contact form, project intake | To understand context and tailor our reply |
| Message contents | Contact form, correspondence | To respond and to retain a project record |
| Payment metadata | Checkout via Stripe | To verify and reconcile a payment (we never see card numbers) |
| Server logs (IP, user-agent, timestamp) | Every request | Security, abuse prevention, debugging |
3. Lawful bases for processing
- Contract — to perform a contract with you or take steps before entering one.
- Legitimate interests — security logging, fraud prevention, responding to enquiries.
- Legal obligation — to retain invoicing records under Spanish tax law (typically six years).
- Consent — for the optional analytics cookie.
4. How we use your data
- Replying to enquiries and preparing proposals.
- Delivering the services you've engaged us for.
- Issuing invoices, taking payments, meeting tax obligations.
- Maintaining a record of work done for legal retention periods.
- Improving the site (with anonymised metrics, only if you accept the analytics cookie).
We do not sell or rent personal data. We do not use it for automated decision-making or profiling.
5. Sharing data with third parties
- Stripe Payments Europe, Ltd. — payment processing.
- EU-based hosting provider — server logs and data submitted via the site.
- Email provider — sending and receiving correspondence.
- Accountant — receives invoice records for tax filing.
6. International transfers
Your data is processed inside the European Economic Area. Where a processor operates infrastructure outside the EEA (Stripe is the primary example), the transfer is governed by Standard Contractual Clauses approved by the European Commission.
7. How long we keep data
- Contact-form messages with no follow-up: 12 months.
- Active project records: project duration + 24 months.
- Invoicing records: 6 years (Spanish tax law).
- Server logs: 30 days.
8. Your rights
Under the GDPR you have the right to access, correct, erase, restrict, object to, and port your data, and to lodge a complaint with the Spanish supervisory authority (www.aepd.es). To exercise any of these: email hello@modernshapeworks.com. We respond within 30 days.
9. Security
The site is served exclusively over HTTPS. Sessions are signed and HTTP-only. Backups are encrypted and rotated weekly. Access to project records is limited to the five members of the studio. We do not store payment-card data on our servers; that is handled entirely by Stripe.
10. Cookies
Cookie use is described separately in the cookie policy.
11. Changes to this policy
If we change how we handle data we'll update this page and adjust the "last updated" date. Material changes are communicated by email to active clients.
12. Contact
Questions, requests or complaints: hello@modernshapeworks.com or by post to Carrer de Buenos Aires, 36, 17310 Lloret de Mar, Spain.