Privacy Policy
Last updated:
Overview
Oriol López ("I", "me", "my") operates as a private technology and AI advisory practice. This Privacy Policy explains how I collect, use, and safeguard information you provide when engaging with this website or my advisory services.
I take the confidentiality of client and contact information with the same rigour I apply to operational design. Your data is never sold, rented, or disclosed for commercial purposes.
Data I Collect
I collect only the information necessary to evaluate and fulfil an advisory engagement. This falls into two categories.
Information You Provide
- Name and professional email address submitted via the contact form
- Nature of inquiry and message context you choose to share
- Any further information exchanged during an engagement or discovery call
Information Collected Automatically
- Standard server logs: IP address, browser type, referring URL, and pages visited
- Usage analytics collected through Google Analytics (pages visited, approximate location, device and browser type) to understand which content is most valuable
How I Use It
Information is used exclusively for the following purposes:
- Responding to consultation requests and scheduling discovery sessions
- Assessing whether an engagement is the right strategic fit
- Fulfilling and managing an active advisory engagement
- Improving this website based on anonymised usage patterns
- Complying with applicable legal obligations
I do not use your information for marketing profiling, automated decision-making, or any purpose unrelated to the advisory relationship.
Third Parties
I do not sell or share your personal data with third parties for commercial purposes. Limited disclosure may occur in these circumstances:
- Service providers — infrastructure and email delivery partners operating under strict data processing agreements
- Google Analytics — website usage data is processed by Google LLC to produce aggregate traffic statistics. Google may transfer this data outside the EEA under its standard contractual clauses. See Google's Privacy Policy, or opt out with the Google Analytics opt-out add-on.
- Legal obligation — when required by applicable law, court order, or regulatory authority
- With your consent — in any other circumstance, only with your explicit prior approval
Your Rights
Under the General Data Protection Regulation (GDPR) and applicable data protection law, you have the following rights with respect to your personal data:
Access
Request a copy of the personal data I hold about you.
Rectification
Request correction of inaccurate or incomplete data.
Erasure
Request deletion of your data where no legitimate basis for retention exists.
Portability
Receive your data in a structured, machine-readable format.
Objection
Object to processing based on legitimate interests.
Restriction
Request that processing be suspended while a dispute is resolved.
To exercise any of these rights, contact me at me@oriollopez.com. I will respond within 30 days.
Data Retention
Contact form submissions from enquiries that do not result in an engagement are retained for 12 months, after which they are permanently deleted.
Data relating to active or completed engagements is retained for 7 years to comply with legal and professional obligations, then securely destroyed.
Security
I implement appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, or loss. These include encrypted data transmission (TLS), access controls, and secure data storage practices.
No method of transmission over the internet is entirely secure. In the unlikely event of a data breach that poses a risk to your rights, I will notify you and the relevant supervisory authority within 72 hours as required by GDPR.
Contact
For any questions about this Privacy Policy or to exercise your data rights, contact me directly:
This policy may be updated periodically. Material changes will be reflected in the "Last updated" date above. Continued use of this website after changes are posted constitutes acceptance of the revised policy.