THE WALLLEGAL

Privacy policy

VERSION 2026-08-28

DATA CONTROLLER

The data controller is Alejandro Suárez Cabrera (NIF/NIE 78729086V), an individual resident in the Canary Islands, Spain, at Calle Francisco Ramos, CANARY ISLANDS, SPAIN. Contact: support@bidonthewall.com.

DATA WE PROCESS

  • Brand name, website URL and uploaded logo.
  • The email address collected by Stripe at checkout.
  • Payment and session identifiers, payment status and amount — never full card details, which are handled by Stripe.
  • Authentication and session data used for magic-link sign-in.
  • Security, fraud prevention and rate-limit data, including a hashed value derived from the request IP.
  • Support communications you send us.

PURPOSES AND LEGAL BASES

  • Performance of the contract: creating and activating a brand, processing contributions, verifying brand ownership, allowing edits and providing support.
  • Legal obligations: accounting and tax record keeping, and responding to lawful requests.
  • Legitimate interests: keeping the service secure, preventing abuse and fraud, and enforcing rate limits.
  • Consent: only if optional marketing communications are offered in the future. None are sent today.

SERVICE PROVIDERS

We use the following providers to run the service:

  • Stripe — payment processing and checkout.
  • Supabase — database, authentication and file storage.
  • Resend — transactional email delivery.
  • Cloudflare — hosting, delivery and network protection.
  • Lovable — application build and hosting platform.

RETENTION

Brand and payment records are kept while the brand is on the wall and afterwards for as long as needed to meet accounting and legal obligations. Security and rate-limit records are kept only for the short period needed for their purpose. Data that is no longer needed for any of these purposes is deleted.

INTERNATIONAL TRANSFERS

Some providers may process data outside the European Economic Area. Where that happens, transfers rely on the safeguards offered by those providers, such as the European Commission's standard contractual clauses or an adequacy decision.

NO SALE OF PERSONAL DATA

Personal data is never sold or rented.

YOUR RIGHTS

You may request access, rectification, deletion, restriction, objection and portability by writing to support@bidonthewall.com. You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).