Privacy Policy

This privacy policy explains how Momentum Fuse SL ("we", "us") collects and processes personal data submitted through this website, in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and Spanish Organic Law 3/2018 on the Protection of Personal Data.

Data controller

Controller

Momentum Fuse SL

Contact for privacy matters

move@momentumfuse.com

What data we collect

When you submit the contact form on this website, we collect the following personal data:

• First name and last name
• Work email address
• Phone number (optional)
• Company name
• Position (optional)
• The content of your message
• Technical metadata used for security and abuse prevention: a SHA-256 hash of your IP address (never the raw IP), your browser's user-agent string, and the timestamp of the submission

We do not use analytics or tracking cookies. See the Cookies policy for details.

Legal basis

We process this data on two legal bases under Article 6 GDPR:

• Consent (Article 6(1)(a)): you tick the consent box on the contact form before submitting your enquiry.
• Legitimate interest (Article 6(1)(f)): our legitimate interest in responding to unsolicited business enquiries and in keeping a record of our commercial correspondence.

Purpose

We use the data solely to respond to your enquiry, to arrange any follow-up conversation you request, and to keep an internal record of the exchange. We do not use it for marketing, we do not sell it, and we do not share it with third parties for their own purposes.

Retention

Enquiries that do not lead to a commercial engagement are deleted within 24 months of the last contact. If the enquiry leads to an engagement, the correspondence is retained for the duration of the engagement and, once it ends, for the period required by applicable tax, commercial and statute-of- limitations rules (typically up to 6 years under Spanish law).

Processors and infrastructure

We rely on the following processors to run this website and to receive enquiries. Each acts on our documented instructions under a data processing agreement (Article 28 GDPR):

• Supabase — hosts the database in which contact form submissions are stored.
• Resend — delivers the transactional email that notifies our team of your enquiry and the automated confirmation sent back to you.
• Cloudflare — provides the edge network and SSL/TLS termination used to serve this website.

International transfers

Some of the processors listed above are established in, or replicate data to, countries outside the European Economic Area, in particular the United States. Where that is the case, the transfer is protected by the European Commission's Standard Contractual Clauses (Decision 2021/914) and, where applicable, supplementary technical and organisational measures such as encryption in transit and at rest.

Security

Data is transmitted over HTTPS and stored in access-restricted systems. We apply the principle of least privilege internally and review access on a regular basis.

Your rights

Under GDPR you have the following rights in relation to your personal data:

• The right of access (Article 15)
• The right to rectification (Article 16)
• The right to erasure (Article 17)
• The right to restriction of processing (Article 18)
• The right to data portability (Article 20)
• The right to object to processing based on legitimate interest (Article 21)
• The right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Article 7(3))

You can exercise any of these rights by writing to move@momentumfuse.com from the email address used in your enquiry, or by providing reasonable proof of identity. We will respond within one month.

Right to lodge a complaint

If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es), C/ Jorge Juan 6, 28001 Madrid.

Changes

We may update this policy from time to time to reflect changes in our practices or in applicable law. The "Last updated" date at the top of this page always reflects the current version.