Privacy Policy

Introduction

This Privacy Policy explains how InfoWebPlus processes personal data when you use infowebplus.com.

Data controller

InfoWebPlus is a trading name operated by George Barbu, a self-employed professional (autónomo) established in Spain.

Services are provided by George Barbu as a self-employed professional registered in Spain under NIF ESY6811821V.

Privacy requests: contact@infowebplus.com.

• Controller: George Barbu
• Country: Spain
• Tax identification (NIF): ESY6811821V
• Privacy contact: contact@infowebplus.com
• Business address: [MANUAL_ADDRESS_REQUIRED]

Personal data we collect

We may collect:

• Name, email, phone, company, and message content from contact and quote forms
• Quote configuration and optional quote-calculator technical metadata (only if you consent to the Tracking cookie category and submit the form)
• Referral data (referrer and lead details) when you submit a referral
• Waitlist email address
• Cookie consent choices stored in your browser

Technical data, security, and rate limiting

Certain technical data is processed to operate and protect the site. This is separate from optional analytics or marketing cookies.

• IP address (from Cloudflare cf-connecting-ip when the site is proxied through Cloudflare, otherwise from x-forwarded-for or x-real-ip) and a truncated User-Agent string are combined to enforce API rate limits on form and related endpoints. This identifier is held in server memory for rolling windows (for example 15 minutes) and is not used for advertising.
• API middleware may assemble transient request metadata (method, path, status, duration, IP, User-Agent) for debugging. The application does not send this to a separate logging product in code today; our hosting provider (Vercel) may still retain standard server access logs under its own policies.
• Optional quote-calculator technical metadata in the browser is collected only when you enable the Tracking category in our cookie banner and submit the quote form.
• Optional scripts loaded through Google Tag Manager run only if you consent to analytics or marketing cookies. We do not list specific tool names here because they are configured in GTM and may change.

Purposes and legal bases

• Respond to contact and quote requests (contract / pre-contractual steps)
• Operate referrals with manual lead outreach, we do not send automated introduction emails to referred leads (legitimate interests / consent of referrer)
• Transactional email via Resend (contract / consent)
• CRM storage in Attio (legitimate interests / consent)
• Load optional GTM container scripts when you consent to analytics or marketing cookies (consent)
• Security, abuse prevention, and rate limiting using IP and User-Agent (legitimate interests)
• Legal compliance (legal obligation)

Sharing and subprocessors

We do not sell personal data. Subprocessors include:

• Attio (CRM), contact, quote, referral, and waitlist submissions
• Resend - transactional emails (form confirmations and internal notifications)
• Sanity - website content and legal page text delivery
• Vercel - hosting and deployment of the website (may retain standard server access logs)
• Google Tag Manager, optional third-party scripts in our container; loads only after analytics or marketing cookie consent (specific tags are not listed here and may change)
• Cloudflare (if enabled) - CDN, security, and client IP via cf-connecting-ip for rate limiting
• Breezy HR, job listing metadata when the jobs API is used

International transfers

Some providers process data outside your country. We use appropriate safeguards offered by those providers where required.

Retention

We retain data as long as needed for the purposes above, then delete or anonymise unless law requires longer retention. CRM records are handled per our documented internal deletion process (see privacy operations documentation).

Security

We use HTTPS, access controls, API rate limiting, and reputable hosting and email providers.

Your rights

Under GDPR you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data in certain cases
• Restrict or object to processing in certain cases
• Data portability where applicable
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority

Exercise rights at contact@infowebplus.com. We aim to respond within 30 days.

Children's privacy

This site is not directed at children under 16.

Changes

We post updates on this page with a new date.

Contact

contact@infowebplus.com

Last updated: June 2026