Privacy Policy
Last updated: 11 August 2026
This Privacy Policy explains how I collect, use and protect personal information when you visit www.elopez.co.uk, contact me through the website or enquire about my services.
Who I am
This website is operated by Estefanía López, an independent Brand & Web Designer operating as a sole trader in the United Kingdom.
For the purposes of UK data protection law, I am the data controller responsible for the personal information described in this Privacy Policy.
Website: www.elopez.co.uk
Email: info@elopez.co.uk
What personal information I collect
I may collect personal information when you contact me or interact with this website.
This may include:
Your name
Your email address
The information you include in your message
Technical information about your device, browser and interaction with the website
Website usage and analytics information, where permitted by your cookie preferences
I only collect information that is reasonably necessary to operate the website, respond to enquiries and provide my services.
How I collect your information
I may collect personal information:
Directly from you when you submit the contact form or email me
Automatically through cookies and similar technologies when you use the website, where applicable
Through analytics and security services used to operate and protect the website
How I use your information
I may use your personal information to:
Respond to enquiries
Discuss potential projects or services
Prepare proposals, estimates or agreements
Communicate with prospective and existing clients
Provide design and web services
Maintain appropriate business and administrative records
Operate, maintain and secure this website
Understand how visitors use the website and improve its performance
Comply with legal, accounting and tax obligations
I do not sell your personal information.
Submitting an enquiry through this website does not subscribe you to a marketing mailing list.
Legal basis for processing
Under UK data protection law, I need a lawful basis for processing your personal information.
Depending on the circumstances, I may rely on the following:
Contract
Where processing is necessary to take steps at your request before entering into a contract or to provide services under an existing agreement.
This may include responding to a project enquiry, preparing a proposal or communicating about work you have commissioned.
Legitimate interests
I may process personal information where it is necessary for the legitimate operation of my business and where those interests are not overridden by your rights.
This may include responding to enquiries, maintaining business records, improving the website and protecting it from misuse or security threats.
Legal obligation
I may process or retain information where necessary to comply with legal, accounting, tax or regulatory requirements.
Consent
Where consent is required, for example for certain non-essential cookies or analytics technologies, processing will be based on your consent.
You can withdraw or change your consent through the cookie settings available on this website.
Contact forms
When you submit the contact form on this website, I collect:
Your name
Your email address
Your message
This information is used to review and respond to your enquiry and, where relevant, discuss a potential project or working relationship.
Form submissions may be stored within the WordPress website and may also be delivered to me by email.
Website analytics
This website uses Google Analytics, implemented through Google Site Kit, to help understand how visitors use the website.
Depending on your consent choices, analytics data may include information such as:
Pages visited
Approximate traffic source
Device and browser information
Interactions with the website
General usage patterns
This information is used to understand website performance and improve the website and its content.
Google Analytics 4 does not log or store individual IP addresses.
Where consent is required, analytics technologies are controlled through the website’s cookie consent system.
Cookies
This website uses cookies and similar technologies.
Some cookies are necessary for the website to function correctly. Other cookies, such as analytics cookies, may only be activated according to your consent preferences.
The website uses Complianz to manage cookie consent and allow visitors to accept, reject or manage optional cookies.
For full details about the cookies and services used on this website, please see the Cookie Policy.
Google reCAPTCHA
This website uses Google reCAPTCHA to help protect forms from spam, fraud and automated abuse.
When reCAPTCHA is used, Google may process technical information relating to your browser, device and interaction with the website in order to determine whether an interaction is legitimate.
Google’s own privacy terms apply to information processed through its services.
Hosting
This website is hosted by Webempresa.
As the website hosting provider, Webempresa may process technical or personal information where necessary to host, secure, maintain and operate the website.
This can include server logs, technical identifiers and information stored through the website.
Webempresa acts according to its own contractual and privacy obligations when providing hosting services.
Other service providers
I may use trusted third-party providers where reasonably necessary to operate this website or my business.
These may include:
Google, including Google Analytics, Google Site Kit and Google reCAPTCHA
Webempresa for website hosting
WordPress and related website technologies
Email service providers
Professional, accounting or administrative service providers where necessary
These providers may process personal information on my behalf or independently under their own privacy terms and legal obligations.
I only share personal information where there is a legitimate reason to do so.
International data transfers
Some technology providers used by this website may process data outside the United Kingdom.
Where personal information is transferred internationally, appropriate safeguards will be used where required by UK data protection law.
How long I keep your information
I do not keep personal information for longer than reasonably necessary.
The retention period depends on why the information was collected.
General enquiries that do not lead to a project may be deleted when they are no longer reasonably required.
Information relating to clients, projects, contracts, invoices, payments and financial records may be retained for longer where necessary for legal, accounting, tax or legitimate business record-keeping purposes.
Website analytics information is retained according to the settings and retention periods configured within the relevant analytics provider.
I periodically review the information I hold and remove information that is no longer required.
How I protect your information
I take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.
These measures may include secure website hosting, SSL encryption, access controls, software updates, security tools and limiting access to personal information where appropriate.
However, no internet-based system can guarantee complete security.
Your data protection rights
Depending on the circumstances, UK data protection law may give you rights relating to your personal information.
These may include the right to:
Request access to personal information I hold about you
Ask for inaccurate or incomplete information to be corrected
Ask for your personal information to be deleted in certain circumstances
Ask for processing to be restricted in certain circumstances
Object to certain types of processing
Request transfer of your information where applicable
Withdraw consent at any time where processing relies on consent
If you would like to exercise any of these rights, contact:
I may need to verify your identity before responding to certain requests.
Complaints
If you have concerns about how your personal information is being handled, please contact me first at:
You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.
More information is available at www.ico.org.uk.
Third-party links
This website may contain links to websites operated by third parties.
I am not responsible for the privacy practices, security or content of external websites. When you visit another website, its own privacy policy and terms will apply.
Changes to this Privacy Policy
I may update this Privacy Policy from time to time to reflect changes to the website, the services I use, my business practices or applicable legal requirements.
The most recent version will always be published on this page, together with the date it was last updated.
Contact
If you have any questions about this Privacy Policy or how your personal information is handled, you can contact:
Estefanía López
Email: info@elopez.co.uk
Website: www.elopez.co.uk