Last updated: June 2026
PRIVACY POLICY
1. Who We Are
This Privacy Policy explains how The Concierge Edit collects, uses, and protects personal data when you visit theconciergedit.com or contact us through our website.
The data controller responsible for your personal data is Lucas Giorgio Sudatti Zangrandi, operating as a self-employed professional (autónomo) under Spanish law, with tax identification number 38175908W, trading as The Concierge Edit, based in Málaga, Spain.
For any questions regarding this policy or your personal data, you may contact us at inquiries@theconciergedit.com.
2. What Data We Collect
We collect personal data only when you voluntarily provide it to us, primarily through our contact and inquiry form. This may include:
Your name
Your email address
The name of the property, brand, or organization you represent
Any information you choose to share about your project or inquiry
We do not collect sensitive personal data (such as health, religious, or biometric data) through our website.
3. How We Use Your Data
We use the personal data you provide solely for the following purposes:
To respond to your inquiry and communicate with you about our services
To evaluate and pursue potential business collaborations
To maintain records of our professional correspondence
We do not use your data for automated decision-making or profiling, and we do not sell, rent, or trade your personal data to third parties.
4. Legal Basis for Processing
Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal grounds:
Consent — you provide your data voluntarily by submitting our contact form
Legitimate interest — to respond to business inquiries and pursue commercial relationships in the ordinary course of our activity
5. Data Sharing and Third Parties
We do not share your personal data with third parties for marketing purposes. Your data may be processed by trusted service providers who support our technical infrastructure, specifically:
Framer (website hosting and form submission infrastructure)
Google Workspace (email communication)
These providers act as data processors and are bound by their own data protection obligations. Should we introduce additional tools in the future, such as website analytics or advertising pixels, this policy will be updated accordingly and, where required, your consent will be requested via our cookie banner.
6. International Data Transfers
Some of our service providers (such as Framer and Google) may process data outside the European Economic Area. Where this occurs, such transfers are conducted under appropriate safeguards, including Standard Contractual Clauses or equivalent mechanisms recognized under GDPR.
7. Data Retention
We retain personal data submitted through our contact form only for as long as necessary to respond to your inquiry and, where a business relationship develops, for the duration of that relationship plus any period required by applicable Spanish commercial or tax law. Inquiries that do not result in a business relationship are deleted within 24 months of the last contact.
8. Your Rights
Under GDPR, you have the right to:
Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict our processing of your data
Request portability of your data
Withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal