Last updated: 1 January 2026
Privacy Policy
TextImpactForge S.L. takes your privacy seriously and processes personal data only for the purposes described here. This policy is written in line with EU Regulation 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).
1. Data controller
- Legal entity: TextImpactForge SL
- CIF: B-44871256
- Address: Plaça d'Abdó Terrades, 6, 17600 Figueres, Girona, Spain
- Email: admin@textimpactforge.com
2. What data we collect
When you use our contact form we collect the data you provide voluntarily: first name, last name, email, optional phone, optional company, country, type of engagement, optional budget range, and the text of your message. When you check out we additionally collect the data needed to issue an invoice — billing name, email, phone, country — and Stripe collects the payment data directly (we never see card numbers).
When you browse the site we set a session cookie (TIFSESSID) that lets the contact form and checkout work, and a small first-party cookie (tif_locale) that remembers whether you chose English or Spanish. We do not run analytics, advertising trackers, or social pixels of any kind.
3. Why we process it
- To reply to your enquiry — legal basis: your consent and the pre-contractual measures requested by you (Art. 6.1 a, b GDPR).
- To execute the contract once you book a brief — legal basis: contract performance (Art. 6.1 b).
- To meet our legal accounting obligations — legal basis: legal obligation (Art. 6.1 c), including the Spanish General Tax Law and the General Accounting Plan.
- To defend against potential claims — legal basis: legitimate interest (Art. 6.1 f).
4. How long we keep it
Enquiry data is kept for 18 months after the last interaction unless you ask us to delete it sooner. Invoicing data is kept for at least six years to comply with Spanish accounting and tax law (LGT, Código de Comercio).
5. Recipients & processors
We do not sell or share personal data with third parties for marketing. We do use the following processors:
- Stripe Payments Europe Ltd (Ireland) — payment processing.
- Hetzner Online GmbH (Germany) — web hosting and email infrastructure.
- Postmark (ActiveCampaign LLC, USA) — transactional email delivery, with EU SCC-based data transfer agreement.
- Google Fonts (Google Ireland Limited) — serving the typefaces used on this site (no cookies, anonymised IP).
6. International transfers
Where any processor handles data outside the European Economic Area, we ensure transfers are covered by adequacy decisions or Standard Contractual Clauses approved by the European Commission.
7. Your rights
Under GDPR and LOPDGDD, you have the right to access your data; to correct it; to ask us to delete it; to restrict processing; to data portability; and to object to processing based on legitimate interest. You may also withdraw consent at any time without affecting prior lawful processing. To exercise any right, write to admin@textimpactforge.com.
8. Right to lodge a complaint
If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos / AEPD) — C. de Jorge Juan, 6, 28001 Madrid — www.aepd.es.
9. Security
We apply technical and organisational measures appropriate to the nature of the data: HTTPS encryption, restricted access to enquiries, no centralised CRM, password manager rotation, and a documented data-retention schedule.