Legal
Privacy policy
Last updated: October 2026
1. Who is responsible
The data controller is Convexify SLU, based in Escaldes-Engordany, Principality of Andorra (NRT L-720508-R). Its registered office and company registration details are listed in the Legal notice. Contact for privacy matters: legal@convexify.tech. The Company has not appointed a data protection officer, as its activity does not require one.
2. Which laws apply
We process personal data in accordance with Llei 29/2021, del 28 d’octubre, qualificada de protecció de dades personals (LQPD) and its implementing regulation (Decret 391/2022), and, where we offer services to persons in the European Union, with Regulation (EU) 2016/679 (GDPR). The European Commission recognises Andorra as providing an adequate level of data protection (Decision 2010/625/EU).
3. What data we collect, why, and for how long
Contact form and email enquiries
Data: name, work email, company (optional) and the content of your message, together with the date of your consent. Purpose: to respond to your enquiry and, where relevant, to prepare a proposal. Legal basis: steps taken at your request prior to entering into a contract and our legitimate interest in managing business relationships (GDPR art. 6.1.b and 6.1.f; LQPD equivalent provisions). Retention: up to 24 months after our last meaningful contact, or for the duration of any resulting contract plus the statutory limitation period. The form sends your message to our mailbox; it is not stored in a database on this website.
Website analytics and performance
We use Vercel Web Analytics and Vercel Speed Insights, which measure visits and page performance without cookies and without persistent identifiers. Data: page visited, referrer, country, browser, device type and page-load timings, associated with a hashed identifier derived from the request that cannot be reversed and is discarded within 24 hours. Purpose: to understand how the website is used and how fast it loads. Legal basis: our legitimate interest in measuring the audience and performance of our website, using a method designed to keep visitors anonymous. No profile of you is created and no data is shared with advertising networks.
Technical logs
Our hosting provider records IP address, user agent, timestamp and requested URL for the security and operation of the website, for a limited period as described in its own policy.
4. Who receives your data
We do not sell personal data. We share it only with providers that process it on our behalf under a data processing agreement: Vercel Inc. (hosting and edge network, United States), Resend Inc. (delivery of the contact form email, United States) and our email provider. Vercel also processes the cookieless analytics and performance data described above. Transfers outside Andorra and the European Economic Area are covered by standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.
5. Your rights
You may request access to your data, rectification, erasure, restriction of processing, portability and objection, and you may withdraw consent at any time where processing is based on consent. Write to legal@convexify.tech; we will respond within one month. You also have the right to lodge a complaint with the Agència Andorrana de Protecció de Dades (apda.ad) or, if you are in the European Union, with your local supervisory authority.
6. Security
We apply technical and organisational measures appropriate to the risk, including encrypted transport (HTTPS), access control, and minimisation of the data we collect.
7. Children
The website and our services are directed at professionals and organisations. We do not knowingly collect data from persons under 16.
8. Changes
We may update this policy when the website or applicable law changes. The date at the top identifies the current version.