Version 1.0 · Updated 23 September 2026.

Privacy Policy

This policy explains how INNOVATIVE CODE CRAFTERS SL ("ICC", "we", or "us") processes personal data when you visit innovativecodecrafters.com or contact us through the website. This publication is based on the current data inventory; the controller and its legal advisers must approve the final wording before publication, especially the lawful bases, provider roles, transfer safeguards, and retention settings.

1. Controller and contact

Controller: INNOVATIVE CODE CRAFTERS SL
NIF: B26911891
Address: Calle Alejandro Dumas 17, oficinas, 29004 Málaga, Spain
Website: innovativecodecrafters.com
Privacy contact: [email protected]

No data protection officer is named in this notice. Use the privacy contact above until the controller confirms a dedicated contact.

2. Data we process

If you submit an enquiry, the website sends the name, email address, and message you choose to provide to our contact endpoint. Your message may contain personal information that you include voluntarily. Do not send credentials, payment details, private keys, or sensitive production data through this form. A hidden anti-spam field is checked and is not sent as enquiry content.

Cloudflare may process technical request and security information needed to deliver and protect the site, such as IP address, requested URL, headers, timestamps, browser or network characteristics, cache information, and security or error signals. The contact function does not read or send an IP address to Resend.

We do not send names, email addresses, messages, request bodies, or Resend delivery content to Firebase or Google Analytics. Optional analytics is limited to aggregate page-view and technical usage measurement after an affirmative choice.

3. Purposes and lawful bases

Contact enquiries: to answer your request, understand the scope, assess fit, and continue ordinary business communication. Pre-contractual steps under Article 6(1)(b) GDPR apply when your enquiry concerns possible ICC services. For other business enquiries, legitimate interest under Article 6(1)(f) GDPR applies only if ICC has documented and approved that basis for the relevant purpose; this page does not assert that approval.
Website delivery and security: to host, deliver, troubleshoot, and protect the website and its contact route, where ICC has documented and approved legitimate interest under Article 6(1)(f) GDPR for necessary operations and security. This page does not assert that approval.
Language and privacy choices: to remember the selected language and record the choice needed to honour analytics preferences using necessary first-party storage.
Optional analytics: to measure aggregate visits and technical usage with Firebase and Google Analytics only after prior, explicit consent under Article 6(1)(a) GDPR. This choice is separate from contacting ICC and is not a basis for handling contact enquiries.

4. Providers and transfers

Cloudflare provides hosting, edge delivery, security, and Pages Functions for the site. Resend provides contact-email delivery after the server validates the enquiry. Firebase and Google Analytics are optional providers and are not loaded before affirmative analytics consent. Provider roles, subprocessors, locations, configured settings, and any international-transfer safeguards follow the applicable provider terms, account configuration, and controller/legal approval; this notice does not select or guarantee a transfer mechanism that has not been confirmed.

The server-only RESEND_API_KEY is used to deliver contact email and is not exposed in the browser. Firebase web configuration identifiers are public application identifiers, not visitor identifiers or server credentials.

5. Storage, cookies, and analytics choice

The site uses i18nextLng to remember language and a versioned icc:privacy-consent record to remember whether optional analytics was granted or denied. These first-party entries are preference or consent storage, not advertising identifiers. See the Cookie Policy for the categories and settings.

Analytics remains disabled when the choice is unknown and until you affirmatively accept it. You can change or withdraw the choice at any time using . Withdrawal stops future browser collection where technically supported, but does not by itself erase data already transmitted; deletion requests for provider-held data follow the applicable provider and controller process.

6. Retention

We retain contact enquiry information while the enquiry is being handled and no longer than the business period approved by the controller, subject to exceptions needed for legal claims or legal obligations. Language and consent entries remain until you change or clear browser storage, or until a new consent version requires a fresh choice.

Cloudflare logs, security and reporting data, Resend messages and delivery metadata, and Firebase/Google Analytics data follow the configured account and provider settings. No numeric provider-retention period is stated here because the applicable settings and controller approval must be confirmed before publication.

7. Your rights

Subject to applicable law and the relevant processing context, you may request access, rectification, erasure, restriction of processing, objection to processing based on legitimate interest, and portability where applicable. You may withdraw analytics consent at any time without affecting processing that was lawful before withdrawal.

Send a request to [email protected]. You may also complain to the Spanish Data Protection Agency (AEPD).

8. Changes

We may update this policy when the site, providers, purposes, consent schema, or legal requirements change. We will publish the new version and update the date above. Material changes to optional providers or purposes require a fresh consent and inventory review where applicable.

Read the Cookie Policy, read the Legal Notice, or return to the homepage.