1. Privacy Policy (GDPR / CCPA)
Reg. (EU) 2016/6791.1 Controller. WordRiverCreative, registered at 11100, C. Leon Herrero, 15 P06 A, Cádiz, San Fernando, Spain, is the data controller for personal data processed through this website and our service engagements. Privacy enquiries: [email protected].
1.2 Data we collect. (a) Identity & contact data you submit (name, email, phone, company); (b) project brief content you include in the inquiry console; (c) technical data (IP address, browser type, pages viewed) collected via essential cookies and, with consent, analytics; (d) billing data processed by our payment provider—WordRiverCreative does not store full card numbers.
1.3 Purposes & legal bases. We process data to: respond to inquiries and issue quotes (Art. 6(1)(b) GDPR—pre-contractual steps); deliver contracted copywriting services (Art. 6(1)(b)); maintain accounting and tax records (Art. 6(1)(c) legal obligation); secure and improve the website (Art. 6(1)(f) legitimate interests / Art. 6(1)(a) consent for non-essential cookies); and send service-related notices (Art. 6(1)(b) or (f)).
1.4 Retention. Inquiry data is retained for up to 24 months from last contact. Contract and invoice records are retained for the statutory period required under Spanish commercial and tax law (generally up to 6 years). Project files are retained for 36 months after delivery unless a longer period is agreed.
1.5 Recipients & transfers. Data is shared only with processors acting on our instructions (hosting, email delivery, payment processing, analytics where consented) under data-processing agreements. Where data is transferred outside the EEA, we rely on Standard Contractual Clauses or an adequacy decision.
1.6 Your rights. Under GDPR you may request access, rectification, erasure, restriction of processing, data portability, and object to processing based on legitimate interests. Where processing rests on consent, you may withdraw it at any time without affecting prior lawfulness. You may lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority.
1.7 CCPA notice (California residents). We do not sell or share personal information as those terms are defined under the CCPA/CPRA. You may request disclosure, deletion, and correction of your personal information, and may designate an authorised agent, by contacting [email protected]. We will not discriminate against you for exercising these rights.
1.8 Security. We apply TLS encryption in transit, access controls, and pseudonymised internal records appropriate to the risk. No method of transmission or storage is perfectly secure; we review safeguards on a recurring basis.