Privacy Policy

Data controller

Personal data collected through this website is processed by:

What data we collect and why

Through the contact form we collect your name, your business name, a phone number or email address, and any answers you choose to give to the optional questions.

The sole purpose is to respond to your inquiry and, where appropriate, to schedule an introductory call. We do not use this data to send marketing unrelated to your inquiry, and we do not share it with third parties for advertising purposes.

If you contact us via WhatsApp, the conversation takes place on Meta's platform and is also subject to that service's terms.

Legal basis

Processing is based on your consent, given by checking the corresponding box when submitting the form (Article 6(1)(a) GDPR), and on taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).

This website is not intended to collect health data. Please do not include clinical information or patient data in the contact form.

How long we keep it

Data is kept for as long as necessary to handle your inquiry and, if a business relationship begins, for the duration of that relationship plus any applicable statutory limitation periods. If no relationship begins, the data is deleted one year after the last contact.

Who else has access to the data

To provide the service we rely on providers who act as data processors and only access the data for the purposes described:

· Vercel Inc. — website hosting and delivery.

· Formspree Inc. — receiving and forwarding contact form messages.

Both providers are based in the United States. Any international data transfers are covered by the safeguards set out in Chapter V of the GDPR, through standard contractual clauses or equivalent adequacy mechanisms.

Other than in these cases, no data is shared with third parties unless required by law.

Clients: processing of your customers' data

When Starvyin provides services to a business and processes data about its customers or staff, it does so as a data processor and never as a data controller. Before any processing begins, a data processing agreement is signed as required by Article 28 of the GDPR.

Where special categories of data are involved, such as health data under Article 9 of the GDPR, they receive the enhanced protection that article requires. Data is processed exclusively for the purposes agreed with the client.

Your rights

Anyone may request access to their personal data, its correction or deletion, restriction of or objection to its processing, and data portability, and may withdraw their consent at any time.

To exercise these rights, simply email the address listed above, stating which right you wish to exercise.

If you believe the processing does not comply with the law, you have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

Last updated: September 2026.