Privacy policy
This policy explains what data we process when you visit holdinginsurtech.com, when you create an account and when you book a service.
Last updated:
01Who is the controller
The data controller is Jaime Valdés, trading as Holding Insurtech as a self-employed professional in Spain. Full identification details appear at the end of this page. You can get in touch at any time through the email address shown there.
02Browsing the site
Browsing without registering triggers no processing of personal data. We use no third-party analytics, no tracking pixels and no advertising cookies. The only preference stored is your visual theme (light or dark), kept locally in your browser and never leaving your device.
03User accounts
If you create an account we process your email address and the identifier returned by the sign-in provider you choose (Google, Facebook or Apple), plus the billing details you enter voluntarily: name, company, tax ID and phone. The purpose is to identify you, let you follow your projects and issue your invoices. The legal basis is performance of the contract and, before booking, your consent in registering. We never receive or store your Google, Facebook or Apple password: authentication happens entirely at the provider.
04Bookings and payments
When you book a service we process the order data (plan, amount, date and status) and your billing details. Your card details NEVER pass through our servers: they are collected and processed directly by Stripe on its own payment page, and we only receive the payment confirmation, the last digits and the card country. The legal basis is performance of the contract and, for retaining invoices, compliance with our tax obligations.
05Processors and providers
To deliver the service we rely on three providers acting as data processors: Netlify, Inc. (site hosting), Supabase, Inc. (database and authentication) and Stripe Payments Europe, Ltd. (payment processing). All three provide adequate safeguards through the standard contractual clauses approved by the European Commission. The database, where your account and billing data lives, is hosted in a European Union region. The server that renders the pages may process the request outside the European Economic Area, always under those clauses. If you choose to sign in with Google, Facebook or Apple, identification happens on their systems under their own policies.
06International transfers
Some of the providers above have US parent companies. Where processing involves a transfer outside the European Economic Area, it relies on the standard contractual clauses and, where applicable, on certification under the EU-US Data Privacy Framework. We do not share data with any third party beyond these processors, except where legally required.
07How long we keep it
Account data is kept for as long as you keep the account open. Invoices and related accounting records are kept for the periods required by tax and commercial law, which run up to six years. Enquiries that do not become projects are deleted once they are no longer needed.
08Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability at any time by writing to our contact email with proof of identity. Many of these you can exercise yourself: billing details are editable from your account, and you can request full deletion by email. If you believe your request has not been handled properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
Provider details
Mandatory provider details (tax ID and address) are missing. They will be completed once self-employed registration in Spain is finalised. If you need them now, write to us and we will provide them.
- Holder
- Jaime Valdés
- Trading name
- Holding Insurtech
- Tax ID
- —
- Registered address
- —
- Activity
- Software development and IT services
- jaimevaldes71@gmail.com
- Phone
- +34 632 638 449