Privacy Policy

1. Introduction

CopywriteCompass protects personal data under GDPR and Spanish data protection law (LOPDGDD — Ley Orgánica 3/2018, de 5 de diciembre).

2. Controller

CopywriteCompass, Avenida de la Constitución 18, 41004 Seville, Spain. write@copywritecompass.com. +34 95 421 83 46.

3. Data Collected

Contact forms: Name, email, phone, website URL, project brief. Client projects: Brand materials, access credentials (encrypted), content drafts. Payment: Stripe (PCI DSS Level 1). We never see or store card details. Analytics: Plausible (EU-hosted, cookie-free, no personal data).

4. Legal Basis

Contract Art.6(1)(b), legitimate interest Art.6(1)(f), legal obligation Art.6(1)(c), consent Art.6(1)(a).

5. Data Sharing

Stripe Inc. (US, SCCs), Plausible Analytics (EU), EU hosting. Never sold or shared for marketing.

6. Retention

Enquiries: 3 years. Project files: 12 months post-delivery. Payment: 6 years (Spanish fiscal law). Comms: 3 years.

7. Rights

Access (15), rectification (16), erasure (17), restriction (18), portability (20), objection (21). Contact write@copywritecompass.com. Complaints: AEPD, C/ Jorge Juan 6, 28001 Madrid.

8. Security

TLS/SSL, 2FA, encrypted storage. Updated: March 2026.