Privacy policy

Last updated: June 2026

Data controller

coffeeprojects (Diego & Juan) — contact: contact@coffeeprojects.es

Data we collect

Name, email, phone and project description, voluntarily provided through the contact form.
When you submit the form we also process your connection's IP address for security and abuse-prevention purposes (rate-limiting submissions). The message backup only stores an irreversible hash of the IP, never the raw IP.
Messages you send through the live chat, along with basic browser information and IP address (handled by Crisp, see "Recipients").
We do not use third-party analytics or advertising cookies.

Purpose

To manage your quote request, assist you via chat and communicate with you about your project. We do not use your data for marketing without prior consent.

Legal basis

Explicit consent (Art. 6.1.a GDPR) via the form checkbox or when initiating a chat conversation.

Retention

We retain your form data during the commercial relationship and for up to 3 years afterwards, unless you request deletion. We also keep a backup of received messages in Upstash, capped to a maximum number of entries (the oldest roll off automatically). The form draft is stored only in your own browser for 7 days and is never transmitted to us.

Your rights

You can exercise your rights of access, rectification, deletion, opposition and portability by writing to contact@coffeeprojects.es.

Recipients

We do not share your data with third parties except under legal obligation. We use the following data processors:

Resend — transactional email service that processes contact form submissions. Privacy policy.
Crisp IM SAS — live chat provider. Processes messages, browser data and IP address on EU servers. Privacy policy.
Upstash Inc. — Redis database used for the form's rate-limiting (anti-abuse) and for a backup of received messages (with the IP pseudonymized via hash). Privacy policy.
Vercel Inc. — website hosting. Privacy policy.