Privacy Policy
This policy covers iagolast.com and software, apps and digital services sold by Iago Lastra that link to this policy. A product with its own privacy notice explains any additional processing there. Third-party projects linked from this portfolio have their own policies.
Who is responsible
Iago Lastra Rodríguez, Spain, is responsible for the personal data described here. For privacy questions or to exercise your rights, email info@iagolast.com.
Data collected and why
- Website visits. The hosting provider, Vercel, processes technical information such as your IP address, browser, requested page and request time to deliver the website and prevent abuse. The legal basis is the legitimate interest in operating a secure, reliable website.
- Messages and support. When you contact me, I receive your email address, name if provided, and the information in your message. I use this to respond to your request, provide pre-contractual information or support your purchase. The basis is taking steps at your request or performing our contract; for other enquiries, it is the legitimate interest in responding to you.
- Purchases. If you buy a product, I receive the contact, billing and transaction information needed to fulfil your order, manage access, subscriptions and refunds, and keep accounting records. Processing is necessary to perform the contract and comply with tax and accounting obligations.
- Product accounts. If a product requires an account, the information requested at registration is used to provide and secure that account under our contract. Any product-specific data, device permissions or optional analytics are explained in that product before collection.
Data needed to process an order or support request must be provided for that purpose; otherwise I may be unable to fulfil it. Please avoid sending sensitive personal information that is not needed for your request.
Payments and service providers
For purchases processed by Stripe, payment details are submitted directly to Stripe. I do not receive or store your full card number or security code. I may receive billing details, payment status, transaction references and limited payment-method information. Stripe also processes data for its own fraud prevention and legal obligations; see the Stripe Privacy Policy.
Data is shared only as needed with providers of hosting, email, payment processing and accounting services, and with public authorities where required by law. Vercel hosts this website; see its Privacy Notice. Purchases through an app store are also subject to that store’s privacy policy. I do not sell personal data or share it for targeted advertising.
Providers may process data outside the European Economic Area, including in the United States. Where required, transfers rely on an applicable adequacy decision or safeguards such as the European Commission’s Standard Contractual Clauses. You can contact me for information about the safeguards relevant to your data.
Cookies
This website does not use advertising cookies or analytics trackers. Hosting security features may use strictly necessary technologies. Separate checkout pages and apps may use technologies needed for payments, security or sign-in, as explained in their notices. Optional tracking that requires consent must be enabled only after that consent is given.
Retention and security
Personal data is kept for as long as needed to provide the service, resolve an enquiry or meet applicable legal requirements. Account data is retained while the account is active; support records while needed to resolve and follow up on the issue; transaction records for the applicable tax, accounting and claims periods. Hosting logs follow the provider’s retention settings. Data is then deleted or anonymised unless a legal obligation or ongoing dispute requires retention.
Reasonable technical and organisational measures protect personal data, including encrypted connections and access controls. No online service can guarantee absolute security.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it at any time without affecting earlier lawful processing.
Send your request to info@iagolast.com. I may need proportionate information to verify your identity. Requests are normally answered within one month, subject to extensions permitted by law. You can also complain to the Spanish Data Protection Agency (AEPD) or your local supervisory authority.
This website does not make solely automated decisions with legal or similarly significant effects about you.
Changes
The date above identifies the latest version. Material changes affecting existing customers will be communicated where required. A change of policy does not replace consent where consent is necessary.