PRIVACY NOTICE
Last updated: 8 September 2026
1. WHO WE ARE
Decksadu is the trading name of Decksadu SL, a company registered in Spain.
Decksadu SL
Camí Vell de Sineu 7
07198 Son Ferriol
Illes Balears, Spain
NIF: B56746548
Telephone: +34 623 19 16 17
Email: hayden@decksadu.com
Decksadu SL is the data controller for the personal data described in this notice. That means we decide why and how your personal data is used.
This notice explains what personal data we collect through www.decksadu.com and in the course of providing our services, why we collect it, who we share it with, how long we keep it, and what rights you have.
2. WHAT PERSONAL DATA WE COLLECT
Data you give us directly
When you contact us, request a quote, complete an intake form or buy a service, we collect the information you provide. Depending on the form, this may include your name, business name, email address, telephone number, country, the details of your project, your raise size and stage, and any files, drafts, financial information or supporting material you upload.
When you buy a service, our payment provider collects your billing address and payment card details. We do not receive or store your full card number.
Data we collect automatically
When you visit our website we collect your IP address, browser and device type, operating system, the pages you view, the time and duration of your visit, and the site or search term that brought you to us. Some of this data can identify you indirectly, either on its own or in combination with other data.
Data from third parties
We may receive your contact details from a referral source, such as a broker or a past client who has recommended us to you.
Special category data
We do not ask for special category data, such as health, political or religious information. Please do not send it to us. If it appears in material you upload, we will handle it under the same terms as the rest of your project material and delete it on request.
3. WHY WE USE YOUR DATA AND OUR LEGAL BASIS
We rely on one of the following legal bases for each purpose.
To respond to your enquiry and provide a quote. Legal basis: our legitimate interest in responding to people who contact us about our services.
To deliver the service you have purchased, including the kick-off call, the work itself, revisions and delivery of files. Legal basis: performance of a contract with you.
To take payment, issue invoices and keep accounting records. Legal basis: performance of a contract, and compliance with our legal obligations under Spanish tax and commercial law.
To operate and secure our website. Legal basis: our legitimate interest in running a functioning, secure website.
To measure how our website is used through analytics. Legal basis: your consent, given through the cookie banner.
To contact past clients about our services, including requests for a review. Legal basis: our legitimate interest in maintaining client relationships and building our reputation. You can opt out at any time and every message we send includes a way to do so.
To establish, exercise or defend legal claims. Legal basis: our legitimate interest in protecting our position.
Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights and concluded that it is not. You can ask us for our assessment, and you can object to this processing at any time using the contact details above.
4. WHO WE SHARE YOUR DATA WITH
We do not sell or rent your personal data.
We use the following service providers, who process personal data on our behalf under written agreements: Squarespace, for website hosting, forms, file uploads and site analytics. Stripe, for payment processing. Google, for analytics, tag management and our business profile. Microsoft, for our Bing business listing and webmaster tools. Our email and file storage providers. Our accountant, for invoicing and statutory accounts. Our CPA reviewer, where a financial model you have commissioned is reviewed before delivery.
We may also disclose personal data where we are required to do so by law, or to professional advisers where necessary to establish or defend a legal claim.
We do not contact investors or lenders on your behalf, make introductions, or pass your project material to any third party for that purpose.
5. INTERNATIONAL TRANSFERS
Several of our service providers are based in the United States, and around 90% of our clients are in North America. Your personal data may therefore be transferred outside the European Economic Area.
Where that happens, the transfer is protected by one of the following: an adequacy decision of the European Commission, the EU-US Data Privacy Framework where the recipient is certified, or the European Commission's Standard Contractual Clauses together with additional safeguards where required.
You can ask us for a copy of the safeguards that apply to a particular transfer.
6. HOW LONG WE KEEP YOUR DATA
Enquiries that do not become projects: 12 months from your last contact with us.
Client project files and correspondence: 6 years from completion of the project, so that we can answer questions about work we have delivered and defend any claim arising from it.
Invoices and accounting records: 6 years, as required by Spanish commercial and tax law.
Website analytics data: 14 months.
Marketing contact list: until you opt out.
We delete or anonymise personal data at the end of these periods unless we are required to keep it for longer.
7. COOKIES AND SIMILAR TECHNOLOGIES
A cookie is a small file placed on your device when you visit a website. We use two kinds.
Necessary cookies keep the site working. They handle page delivery, security and your cookie preferences. These are set without your consent because the site cannot function without them.
Analytics cookies tell us how the site is used, including which pages are viewed, how long visitors stay and where they arrive from. These are set by Google Analytics and Google Tag Manager through Squarespace, and they are only placed if you accept them through our cookie banner.
Analytics cookies can identify you indirectly. They record an identifier tied to your browser, which may be combined with your IP address and browsing behaviour. We do not use them to identify you by name.
You can decline analytics cookies through the banner, change your preferences at any time through the same banner, and delete existing cookies through your browser settings. Declining analytics cookies does not affect your ability to use the site or to buy a service.
8. AUTOMATED DECISION-MAKING
We do not make decisions about you by automated means, and we do not carry out profiling that produces legal or similarly significant effects.
9. YOUR RIGHTS
Under the General Data Protection Regulation you have the right to access the personal data we hold about you and receive a copy of it, have inaccurate data corrected, have your data deleted where we no longer have grounds to keep it, restrict how we use your data while a question about it is resolved, receive the data you gave us in a portable format or have it sent to another provider, object to processing based on our legitimate interests including marketing contact, which we will stop unless we have compelling grounds to continue, and withdraw your consent to analytics cookies at any time without affecting anything done before you withdrew it.
To exercise any of these rights, contact us using the details in section 1. We will respond within 1 month. There is no charge, unless a request is manifestly unfounded or excessive.
If you are unhappy with how we have handled your data, you can complain to the Spanish data protection authority: Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.
If you live in another EU country, you may complain to your local supervisory authority instead.
10. SECURITY
We use encrypted connections for all data submitted through this website, and our providers encrypt data at rest. Access to client files and personal data is limited to those who need it to deliver the work or to keep our accounts. Devices and accounts are protected by password and multi-factor authentication.
No system is completely secure. If a breach affects your personal data and is likely to result in a risk to your rights, we will notify the Agencia Española de Protección de Datos within 72 hours and tell you directly where the law requires it.
11. LINKS TO OTHER SITES
Our website links to other sites, including our payment provider and our business listings. We are not responsible for their content or their privacy practices. Read their privacy notices before giving them your data.
12. CHILDREN
Our services are sold to businesses and to adults acting in a professional capacity. We do not knowingly collect data from anyone under 18. If you believe we hold data about a child, contact us and we will delete it.
13. CHANGES TO THIS NOTICE
We may update this notice. The date at the top shows when it was last changed. Where a change materially affects how we use your data, we will tell you directly.