Legal Framework

Legal Protocols

Last updated: June 30, 2026

01

Privacy Policy

1. Data Controller

The data controller responsible for the processing of personal data collected through this website is North Pixel Craft, registered at Calle Juan Sebastián Elcano, 3, 4º Izq., 24404 Ponferrada (León), Spain. Contact email: [email protected]. For any data protection inquiries, you may contact our designated data protection representative at the aforementioned email address.

2. Legal Basis for Processing

We process personal data under the following legal bases as defined in Article 6 of the EU General Data Protection Regulation (GDPR):

  • Consent (Art. 6(1)(a)): When you submit a contact form, subscribe to communications, or accept non-essential cookies, you provide explicit, informed consent for the specific processing purpose stated at the point of collection.
  • Contractual Necessity (Art. 6(1)(b)): Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract (e.g., project scoping, quotation delivery).
  • Legitimate Interest (Art. 6(1)(f)): We may process data for our legitimate interest in improving our services, preventing fraud, and ensuring network security, provided such interest is not overridden by your fundamental rights.

3. Data We Collect

We collect and process the following categories of personal data:

  • Identity Data: Name, company name, job title (provided via contact forms).
  • Contact Data: Email address, telephone number, postal address.
  • Technical Data: IP address, browser type and version, operating system, device identifiers, and pages visited (collected automatically via server logs and analytics tools).
  • Communication Data: Records of correspondence you send to us, including project briefs and support inquiries.

4. Purpose of Processing

Your personal data is processed for the following purposes: (a) responding to your inquiries and providing requested quotations; (b) performing contractual obligations related to web design and development services; (c) sending service-related communications, including project updates and invoices; (d) maintaining internal records for accounting and tax compliance; (e) improving our website functionality and user experience through aggregated analytics; (f) complying with legal obligations under Spanish and EU law.

5. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected. Contact form submissions are retained for a maximum of 24 months. Contract-related data is retained for the duration of the contractual relationship plus 6 years in compliance with Spanish commercial and tax record-keeping obligations (Código de Comercio, Art. 30). Technical analytics data is retained in aggregated, anonymized form indefinitely.

6. Data Sharing & Transfers

We do not sell, rent, or trade personal data. Data may be shared with: (a) our hosting infrastructure provider (located within the EU/EEA); (b) payment processors engaged for transaction processing; (c) government authorities when required by law. We do not transfer personal data outside the European Economic Area unless adequate safeguards (Standard Contractual Clauses or adequacy decisions) are in place, in compliance with Chapter V of the GDPR.

7. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

  • Right of Access (Art. 15): Request confirmation of whether we process your data and obtain a copy of that data.
  • Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Art. 17): Request deletion of your personal data where there is no compelling legal ground for continued processing.
  • Right to Restriction (Art. 18): Request restriction of processing in specific circumstances.
  • Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format.
  • Right to Object (Art. 21): Object to processing based on legitimate interests, including direct marketing.
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — AEPD) at www.aepd.es.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data, including: TLS/SSL encryption for all data in transit; encrypted database storage at rest; access controls limiting data access to authorized personnel only; regular security audits and vulnerability assessments; incident response procedures aligned with Art. 33-34 GDPR breach notification requirements.

02

Cookie Matrix

1. What Are Cookies

Cookies are small text files stored on your device when you visit a website. They enable the site to recognize your device and store information about your preferences or past actions.

2. Cookies We Use

This website uses the following categories of cookies:

Category Purpose Duration
Strictly Necessary Session management, CSRF protection, load balancing Session / 24h
Functional Language preference, UI state persistence 30 days
Analytics Aggregated traffic analysis, performance monitoring 26 months

3. Consent Management

In compliance with Article 7 of the ePrivacy Directive (2002/58/EC) and the GDPR, non-essential cookies are only activated after you provide explicit consent through our cookie consent banner. Strictly necessary cookies, which are essential for the website's basic functionality, do not require consent as they fall under the legitimate interest exemption. You may modify or withdraw your cookie consent at any time through your browser settings.

4. Third-Party Cookies

We do not embed third-party tracking cookies or advertising pixels. Google Maps integration on our contact page may set cookies according to Google's privacy policy. We encourage you to review Google's data handling practices at policies.google.com/privacy.

5. Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling strictly necessary cookies may impair website functionality. Instructions for managing cookies in major browsers are available at www.allaboutcookies.org.

03

Refund Terms

1. General Refund Principles

At North Pixel Craft, we are committed to delivering high-quality digital services. Refund eligibility is assessed on a case-by-case basis in accordance with Spanish consumer protection law (Real Decreto Legislativo 1/2007, Texto Refundido de la Ley General para la Defensa de los Consumidores y Usuarios) and EU consumer rights directives.

2. Pre-Contractual Cancellation

If you cancel a project before any work has commenced (within 14 calendar days of signing the service agreement), you are entitled to a full refund of any advance payment made, in accordance with your right of withdrawal under EU consumer law. Cancellation must be communicated in writing to [email protected].

3. Partial Refunds During Active Projects

For projects in progress, refunds are calculated based on the milestone completion status:

  • Phase 1 (Analysis/Audit) completed: Up to 30% of the total project fee may be retained to cover diagnostic and planning work delivered.
  • Phase 2 (Execution) in progress: Refunds are calculated proportionally based on deliverables completed and accepted by the client at the time of cancellation.
  • Phase 3 (Delivery) completed: Full project fee is non-refundable. Post-delivery support obligations remain in effect per the original agreement.

4. Non-Refundable Items

The following are non-refundable: domain registration fees paid to third-party registrars; third-party software license fees already procured on the client's behalf; stock photography, font licenses, or API subscriptions purchased specifically for the project; completed and accepted milestone deliverables.

5. Refund Process

Refund requests must be submitted in writing within 30 calendar days of the relevant invoice date. Approved refunds are processed within 14 business days via the original payment method. A refund confirmation with a detailed breakdown will be provided. Disputes regarding refund eligibility may be escalated to mediation through the Spanish Consumer Arbitration Board (Junta Arbitral de Consumo).

04

Service契约

1. Scope of Services

North Pixel Craft provides web design, frontend development, and digital architecture services as described in individual project proposals and statements of work. Each project engagement is governed by a specific service agreement that details the scope, deliverables, timeline, and pricing. These Terms of Service apply to all engagements unless superseded by a signed project-specific agreement.

2. Project Execution & Acceptance

Projects follow a phased delivery model. Each phase concludes with a client review period of 5 business days during which the client may request modifications or formally accept the deliverables. Deliverables not rejected within the review period are deemed accepted. Requests for modifications outside the agreed scope are treated as change orders and billed at the applicable hourly rate.

3. Payment Terms

Unless otherwise specified in the project agreement: (a) a 40% deposit is required before project commencement; (b) 30% is due upon completion of Phase 2 (Execution); (c) the remaining 30% is due upon final delivery and acceptance. Invoices are payable within 14 calendar days. Late payments accrue interest at the statutory rate defined in Art. 1108 of the Spanish Civil Code. We reserve the right to suspend work on any project with outstanding invoices exceeding 30 days.

4. Intellectual Property

Upon full payment of all project fees, all intellectual property rights in the final deliverables (source code, design files, written content) are transferred to the client. North Pixel Craft retains the right to display completed projects in its portfolio and marketing materials unless the client objects in writing. Pre-existing frameworks, libraries, and tools used in development remain the property of their respective owners and are licensed to the client as part of the deliverables.

5. Limitation of Liability

North Pixel Craft's total liability under any project agreement shall not exceed the total fees paid by the client for that specific project. We shall not be liable for indirect, consequential, or incidental damages, including but not limited to loss of revenue, data loss, or business interruption. We are not responsible for third-party service outages, hosting failures, or client-side modifications to delivered codebases.

6. Confidentiality

Both parties agree to maintain the confidentiality of proprietary information shared during the course of the engagement. This obligation survives the termination of the project agreement for a period of 2 years. Confidential information shall not be disclosed to third parties without written consent, except as required by law.

7. Termination

Either party may terminate a project agreement with 15 calendar days' written notice. Upon termination, the client is responsible for payment of all work completed and accepted up to the termination date. All completed deliverables and source code are released to the client upon receipt of outstanding payment.

8. Governing Law & Jurisdiction

These Terms of Service are governed by the laws of the Kingdom of Spain. Any disputes arising from or in connection with these terms shall be submitted to the competent courts of Ponferrada, León, Spain. Both parties agree to attempt amicable resolution before initiating formal legal proceedings.

9. Modifications

North Pixel Craft reserves the right to update these Terms of Service at any time. Material changes will be communicated via email to active clients and published on this page with an updated revision date. Continued engagement after notification constitutes acceptance of the modified terms.