Privacy policy
Last updated: 7 November 2026
This is an English translation for information purposes. In case of any discrepancy, the Spanish version prevails.
1. Data controller
- Controller: Carmen Cruz Rodríguez (Growth Archives)
- Tax ID (NIF): 41023986J
- Address: Carrer de la Indústria, 8-10, 43300 Mont-roig del Camp (Tarragona), Spain
- Privacy contact email: carmen.archives.cr@gmail.com
2. What data we process
When you complete the form on this website and, where applicable, book an appointment, we process:
- Your business's industry
- Name
- WhatsApp number
- Email (to send you the Google Meet invitation and appointment reminders)
- Date and time of the appointment you book
- Information about how you reached the website (source campaign or ad, UTM parameters and Meta click identifier)
We do not request special categories of data. This service is aimed at professionals and businesses run by adults.
3. What we use it for and on what legal basis
| Purpose | Legal basis |
|---|---|
| Handling your request for a free consultation, managing the booking and holding the meeting on Google Meet | Taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) |
| Sending you the appointment confirmation and a reminder on the day of the session via WhatsApp | Your consent, given by ticking the box on the form (Art. 6(1)(a) GDPR) |
| Commercial follow-up of your request after the meeting | Legitimate interest in responding to people who have requested information (Art. 6(1)(f) GDPR) |
| Measuring the effectiveness of our ads on Meta (Facebook and Instagram) | Legitimate interest in measuring the effectiveness of our advertising (Art. 6(1)(f) GDPR) |
You can withdraw your consent at any time by writing to carmen.archives.cr@gmail.com, without affecting the lawfulness of processing carried out before withdrawal.
4. How long we keep it
- If you do not become a client: up to 24 months from the last contact, unless you ask us to delete it sooner.
- If you hire our services: for the duration of the business relationship and, afterwards, for the legally required retention periods (tax and accounting obligations).
5. Who we share it with
We do not sell your data. To provide the service we rely on providers who process data on our behalf (data processors), with whom we have the contracts required by the GDPR:
- IONOS (web hosting and server; European Union).
- Google (Google Calendar and Google Meet, for the booking and the meeting).
- Meta Platforms Ireland (WhatsApp Business Platform for appointment notifications; Meta pixel for ad measurement).
Some of these providers may process data outside the European Economic Area, in particular in the United States. These transfers are covered by the EU-U.S. Data Privacy Framework or by the standard contractual clauses approved by the European Commission.
We will not disclose your data to other third parties unless legally required to do so.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to carmen.archives.cr@gmail.com and stating which right you wish to exercise. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), password-restricted access to the CRM and backups.