Privacy Policy

1. Who we are

OneTen Technologies is a trading name operated by Jamie Jonas, based in Estepona, Andalucía, Spain. We are the data controller for the personal data collected through this website (oneten.tech) and related services.

Contact: [email protected]

2. What data we collect

We collect the following personal data when you use our website and services:

Via our intake form: Business name, your name, email address, phone number, website preferences, design choices, and any other information you provide about your business.

Via our contact channels: Name, email, phone number, and the content of your messages when you contact us via email, WhatsApp, or phone.

Automatically: We use Umami Analytics, a privacy-focused, cookie-free analytics tool. It collects anonymous, aggregated usage data (page views, referrer, country, device type) without using cookies and without collecting any personally identifiable information. No IP addresses are stored.

3. How we use your data

We use your personal data for the following purposes:

To provide our services: Processing your intake form submission, designing and building your website, and managing your account. Lawful basis: performance of a contract (GDPR Article 6(1)(b)).

To communicate with you: Responding to enquiries, providing updates on your project, and sending service-related communications. Lawful basis: legitimate interest (GDPR Article 6(1)(f)).

To improve our services: Anonymous analytics to understand how our website is used. Lawful basis: legitimate interest (GDPR Article 6(1)(f)).

4. Where your data is stored

All data is hosted exclusively within the European Union on servers operated by Hetzner Online GmbH in Germany (Nuremberg and Falkenstein data centres). Hetzner holds ISO 27001:2022 certification and processes data in compliance with GDPR.

We do not transfer your personal data outside the European Economic Area (EEA).

5. Who we share your data with

We do not sell your personal data. We may share it with the following categories of recipients, only as necessary to provide our services:

Hetzner Online GmbH — our hosting provider (data processor), based in Germany.

Cloudflare, Inc. — DNS management only. Cloudflare does not store or process your personal data in the context of our use (DNS-only mode, no proxying of traffic).

We will disclose personal data if required to do so by law or in response to valid legal process.

6. How long we keep your data

Client data: For the duration of our service agreement plus 6 years after the end of the contract (to comply with Spanish tax and commercial record-keeping obligations).

Enquiry data: If you contact us but do not become a client, we retain your data for up to 12 months, after which it is deleted.

Analytics data: Umami analytics data is anonymous and aggregated. It does not constitute personal data.

7. Your rights

Under the UK GDPR, EU GDPR, and the Spanish LOPDGDD, you have the following rights:

Right of access — You can request a copy of the personal data we hold about you.

Right to rectification — You can ask us to correct inaccurate or incomplete data.

Right to erasure — You can request that we delete your personal data, subject to any legal obligations requiring retention.

Right to restrict processing — You can ask us to limit how we use your data.

Right to data portability — You can request your data in a structured, machine-readable format.

Right to object — You can object to our processing of your data where we rely on legitimate interest.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. For the UK, this is the Information Commissioner's Office (ICO). For Spain, this is the Agencia Española de Protección de Datos (AEPD).

8. Cookies

Our website uses minimal cookies. We use Umami Analytics which is entirely cookie-free and does not track individual users.

We may set a small number of essential cookies required for the operation of our intake form. For full details, see our Cookie Policy.

9. Children's data

Our services are designed for businesses and are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.