Legal
Privacy policy
Who is the controller
Harry-Up Marketing Efectivo S.L. (Nombrada), tax ID (CIF) B86797313, Paseo de la Castellana 40, 8ª, 28046 Madrid, Spain. hola@nombrada.com · +34 917 51 82 88.
What data, what for and on what basis
- What you type in the form (business, contact, email). What for: to make your free cover and let you know about it. Legal basis: your request (pre-contractual steps). How long: 30 days if you do not buy.
- Your customer and billing data. What for: to build, publish and maintain your website, charge you and invoice you. Legal basis: the contract. How long: while the service lasts, and afterwards as long as tax law requires (up to 6 years).
- The domain holder details. What for: to register your domain in your name. Legal basis: the contract. How long: while the service lasts.
- Your emails to support. What for: to answer you. Legal basis: your request. How long: 2 years.
- Emails about your order and your website (notices, monthly report). What for: to keep you informed about the service. Legal basis: the contract. How long: while it lasts.
- Your website as an example (your business name, your cover, your logo and your website, with a link to it; never your photos showing people). What for: to show our work on Nombrada. Legal basis: our legitimate interest; you can object any time by writing to hola@nombrada.com and we take it down. How long: until you object or cancel.
- Measuring our advertising (when you pay the setup: your email and your country, irreversibly encrypted; an identifier of your order, also encrypted; the amount and currency, the order number and which link you came from). What for: so Meta (Facebook and Instagram) can tell us which Nombrada ads bring customers. Legal basis: our legitimate interest; you can object any time at hola@nombrada.com and we stop sending it. How long: as long as Meta keeps it under its terms.
We do not sell your data or build marketing profiles. The only thing we share for advertising is what is described under «Measuring our advertising», and without placing cookies or pixels in your browser.
Who else processes it (processors)
To provide the service, we use these providers, who process data only on our behalf:
- Cloudflare (hosting, database, email) — US / EU
- Stripe (payments; we never see your card) — US / Ireland
- Holded (invoicing) — Spain
- Meta (measuring our advertising; only when you pay, and your encrypted email) — Ireland / US
- Anthropic (the artificial intelligence that writes the texts and the design, and answers support) — US
- GitHub, by Microsoft (the server where your website is built) — US
- DataForSEO (search volumes; it only receives the trade and the area, no personal data)
- Google (finding your Google business listing, if you use it) — US
- cdmon (registering your domain, if included) — Spain
When a provider is outside the European Economic Area, the transfer is covered by the EU-US Data Privacy Framework (if the provider participates) or by the European Commission's standard contractual clauses.
Artificial intelligence
With what you tell us about your business, an AI writes your texts and designs your website. It does not make decisions about you as a person: the only automated decision is whether your website passes the quality jury, and if it does not, we keep improving it before we show it to you. You can ask for a person to review any decision by writing to hola@nombrada.com.
Our customers' websites that have «Your AI receptionist» carry a chat answered by an AI (from Anthropic) on behalf of that business, and it says so from the first message.
Our email support answers with the help of an AI, and says so in every reply. Anything involving money, cancellations or complaints is reviewed by a person before we reply.
Your rights
You can access your data, rectify it, erase it, object, ask for its use to be restricted and take it with you, by writing to hola@nombrada.com. If you think we have not handled it properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Data of people who write to our customers
We process the messages sent through a customer's website, including its AI receptionist chat, on behalf of that customer, who is the controller. We do not keep chat conversations: only the name and phone number you leave so the business can call you and, for 180 days and without knowing who asked them, the questions the receptionist couldn't answer, so the business can complete its website. If you want to exercise your rights over them, contact the business behind that website; if your request reaches us, we pass it on to them.