Privacy policy
English translation for convenience. The Spanish version prevails.
Last updated: September 2026
This page explains what personal data I handle when you visit bigwordscopywriting.com, ask me for a quote or hire me, and what you can do about it. I follow Regulation (EU) 2016/679 (GDPR) and Spain’s Organic Law 3/2018 (LOPDGDD).
1. Data controller
Controller: Alicia Moreno Moreno, self-employed professional (autónoma), trading as "Big Words Copywriting"Address: Carrer Bartomeu Oliver de Can Tunis, 45, 07198 Son Ferriol, Palma (Illes Balears), SpainEmail: hola@bigwordscopywriting.comPhone: +34 971 42 83 64I haven’t appointed a data protection officer because I’m not required to. For any privacy question, use the email above.
2. What data I handle
Quote form. Name, email, phone (optional), company or website (optional), the service and package you’re interested in, guide budget, preferred date, your message and, if you attach them, files (optional). I also keep the fact that you ticked the box accepting this policy.
Emails and calls. Whatever you give me when you write or ring.
If you hire me. Billing details (name or company name, tax ID, address) and the information and materials you send me for the job.
Technical data. To protect the form from abuse, I keep an encrypted code derived from your IP address (a keyed hash; the IP itself isn’t stored in readable form). My hosting provider also records data such as IP address, date and time, and the page requested in its server logs.
I don’t ask for special categories of data (health, beliefs and so on). Please leave them out of your message and your files.
3. What I use it for, and the legal basis
| Purpose | Legal basis (Art. 6(1) GDPR) |
|---|---|
| Replying to your request, preparing the quote and sending you an automatic email confirming I’ve received it | Steps taken at your request before a contract (6(1)(b)) |
| Running the job if you hire me: communication, deliveries, revisions and payment | Performance of the contract (6(1)(b)) |
| Issuing and keeping invoices, and meeting tax and accounting obligations | Legal obligation (6(1)(c)) |
| Protecting the site and the form against spam, abuse and attacks (submission limit, server logs) | Legitimate interest in keeping the site secure (6(1)(f)) |
I don’t use your data to send you marketing or to build profiles, and I make no automated decisions about you.
The required form fields are the minimum I need to reply. If you leave them blank, I can’t answer your request.
4. Files you attach
You can attach up to 3 files (briefs, current copy, photos) to give me context. They reach me by email together with your request. The web server processes them only as far as needed to send them on and doesn’t keep them afterwards.
If the files include other people’s data (for example names of staff, customers or guests, or photos with people in them), you guarantee that you have a lawful basis to share it with me and that those people have been informed where the law requires it. If the job doesn’t need that data, it’s better to remove it before sending.
5. How long I keep data
- Requests that don’t lead to a contract: 12 months from our last contact. Then I delete them.
- Client data: for the length of the job and afterwards for as long as needed to deal with any possible liabilities.
- Invoices and billing data: for the period set by tax and commercial law (usually 4 to 6 years).
- Encrypted IP code used for the submission limit: 1 hour at most.
- Server logs: kept by the hosting provider for a limited period, normally no more than 14 days.
6. Who else can see your data
I don’t sell or pass your data on. Only these can access it:
- My hosting provider, with servers in the European Union, and my email provider. Both act as processors: they handle the data on my behalf and under contract.
- The Spanish Tax Agency and other public bodies, where the law requires it (billing data, for instance).
I don’t transfer data outside the European Economic Area.
7. Your rights
You can ask me at any time for:
- Access: to know what data of yours I hold.
- Rectification: to correct anything that’s wrong.
- Erasure: to delete it, once it’s no longer needed and I’m not legally required to keep it.
- Objection: to stop processing based on legitimate interest.
- Restriction: to keep the data without using it while a complaint is resolved.
- Portability: to receive the data you gave me in a commonly used format.
Email hola@bigwordscopywriting.com saying which right you want to use. If I have reasonable doubts about who you are, I’ll ask for what I need to confirm it. I’ll answer within one month, which the GDPR allows me to extend in some cases.
If you think I haven’t handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es. I’d appreciate it if you wrote to me first, in case I can put it right.
8. Security
The site runs over an encrypted connection (HTTPS). I take reasonable technical and organisational measures to protect your data against loss, unauthorised access and misuse.
9. Children
This site and my services are aimed at adults. If you’re under 14, please don’t send me your details through the form.
10. Cookies
This site does not use cookies. Fonts are served from my own server, and there’s no analytics, embedded video or other third-party content tracking you.
11. Changes to this policy
If I change anything important, I’ll update the date at the top. The version published here is the current one.