Privacy Policy
Last updated:
Overview
Oriol López ("I", "me", "my") operates as a private technology and AI advisory practice. This Privacy Policy explains how I collect, use, and safeguard information you provide when engaging with this website or my advisory services.
I take the confidentiality of client and contact information with the same rigour I apply to operational design. Your data is never sold, rented, or disclosed for commercial purposes.
Data We Collect
I collect only the information necessary to evaluate and fulfil an advisory engagement. This falls into two categories.
Information You Provide
- radio_button_unchecked Name and professional email address submitted via the contact form
- radio_button_unchecked Nature of inquiry and message context you choose to share
- radio_button_unchecked Any further information exchanged during an engagement or discovery call
Information Collected Automatically
- radio_button_unchecked Standard server logs: IP address, browser type, referring URL, and pages visited
- radio_button_unchecked Aggregate, anonymised analytics to understand which content is most valuable
How We Use It
Information is used exclusively for the following purposes:
- check Responding to consultation requests and scheduling discovery sessions
- check Assessing whether an engagement is the right strategic fit
- check Fulfilling and managing an active advisory engagement
- check Improving this website based on anonymised usage patterns
- check Complying with applicable legal obligations
I do not use your information for marketing profiling, automated decision-making, or any purpose unrelated to the advisory relationship.
Third Parties
I do not sell or share your personal data with third parties for commercial purposes. Limited disclosure may occur in these circumstances:
- check Service providers — infrastructure and email delivery partners operating under strict data processing agreements
- check Legal obligation — when required by applicable law, court order, or regulatory authority
- check With your consent — in any other circumstance, only with your explicit prior approval
Your Rights
Under the General Data Protection Regulation (GDPR) and applicable data protection law, you have the following rights with respect to your personal data:
Access
Request a copy of the personal data I hold about you.
Rectification
Request correction of inaccurate or incomplete data.
Erasure
Request deletion of your data where no legitimate basis for retention exists.
Portability
Receive your data in a structured, machine-readable format.
Objection
Object to processing based on legitimate interests.
Restriction
Request that processing be suspended while a dispute is resolved.
To exercise any of these rights, contact me at me@oriollopez.com. I will respond within 30 days.
Data Retention
Contact form submissions from enquiries that do not result in an engagement are retained for 12 months, after which they are permanently deleted.
Data relating to active or completed engagements is retained for 7 years to comply with legal and professional obligations, then securely destroyed.
Security
I implement appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, or loss. These include encrypted data transmission (TLS), access controls, and secure data storage practices.
No method of transmission over the internet is entirely secure. In the unlikely event of a data breach that poses a risk to your rights, I will notify you and the relevant supervisory authority within 72 hours as required by GDPR.
Contact
For any questions about this Privacy Policy or to exercise your data rights, contact me directly:
This policy may be updated periodically. Material changes will be reflected in the "Last updated" date above. Continued use of this website after changes are posted constitutes acceptance of the revised policy.