Privacy policy
Last updated: 26 September 2026
Data controller
Rafael Alejandro Salcedo Garrote (ORMA), tax ID 30268798Q, Av. Alcalde Manuel del Valle 5, 41008 Sevilla (España). Email: info [@] ormadigital.com.
What data we process and why
Data you give us through the contact form (name, email and, optionally, company and phone; type of request, services of interest, timing, current website, approximate budget and message), by email, WhatsApp or phone.
We use it to reply to your request, send you quotes or the audit you asked for and, if you hire us, to manage the business relationship and invoicing. Together with your request we record technical origin data (landing page, campaign or referring website) only if you have accepted analytics cookies.
We do not use automated decision-making and will not send you marketing emails without your prior consent.
Legal basis
Your consent when you submit the form (art. 6.1.a GDPR), pre-contractual steps and performance of the contract if you hire us (art. 6.1.b), and compliance with legal obligations such as tax (art. 6.1.c).
How long we keep it
Enquiries that do not become projects, for up to 2 years. Client data, for the duration of the relationship and then for the period required by law (generally 6 years for accounting and tax records).
Recipients
We do not share your data with third parties unless legally required. Service providers (web hosting, form handling, email, CRM, invoicing) may access it as data processors under contracts guaranteeing confidentiality.
Some providers may be outside the European Economic Area; in that case transfers rely on adequacy decisions (such as the EU-US Data Privacy Framework) or European Commission standard contractual clauses.
Your rights
You can access, rectify and erase your data, object to or restrict its processing, request portability and withdraw consent at any time by writing to info [@] ormadigital.com and stating which right you wish to exercise.
If you believe your data has not been handled properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.
Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration.