Privacy Policy

Last updated: March 2026

KAUFAST ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit kaufast.com and use our services.

Data Controller

The data controller responsible for your personal data is:

KAUFAST Carrer de la Ribera 14, 08003 Barcelona, Spain Email: info@kaufast.com Phone: (+34) 689 219 866

Information We Collect

Information collected automatically

  • IP address and approximate geolocation (for language detection and analytics)
  • Browser type, device type, and operating system
  • Pages visited, time spent on pages, and navigation paths
  • Referring website or source
  • Core Web Vitals and performance metrics

Information you provide

  • Name and email address (via contact form)
  • Phone number (if provided)
  • Company name and project details (if provided)
  • Any other information you voluntarily submit

How We Use Your Information

  • To respond to your enquiries and provide requested services
  • To send you project proposals and follow-up communications
  • To improve our website performance and user experience
  • To analyse website traffic and usage patterns (via Google Analytics 4)
  • To detect and prevent fraud or technical issues
  • To comply with legal obligations

Legal Basis for Processing (GDPR)

  • Consent: When you submit a contact form, accept cookies, or opt in to communications.
  • Legitimate interest: Website analytics, security monitoring, and service improvement.
  • Contractual necessity: Processing required to deliver services you have engaged us for.
  • Legal obligation: Where we are required by law to retain or disclose data.

Cookies and Tracking

We use cookies to enhance your experience and analyse site traffic. Cookies are categorised as follows:

Necessary cookies

Required for the website to function. These include language preference cookies and session cookies. Cannot be disabled.

Analytics cookies

Used to understand how visitors interact with our site. We use Google Analytics 4 (via Google Tag Manager, container ID: GTM-NJHK9DQ4). These cookies are only loaded after you give consent.

Marketing cookies

Used to deliver relevant advertisements and measure campaign effectiveness. Only loaded with your explicit consent.

You can manage your cookie preferences at any time using the cookie settings button in the footer of our website.

Data Sharing and Third Parties

We do not sell your personal data. We may share information with:

  • Google LLC (Analytics and Tag Manager) — for website analytics. Data may be transferred to the United States under Google's Standard Contractual Clauses.
  • Web3Forms / AWS SES — for processing contact form submissions.
  • Cloudflare Inc. — for CDN, performance optimisation, and security. Cloudflare processes data under their DPA.
  • Vercel Inc. — for website hosting and deployment.

International Data Transfers

Some of our service providers are based outside the European Economic Area (EEA) and UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy:

  • Contact form submissions: 24 months from last interaction
  • Analytics data: 14 months (Google Analytics default)
  • Cookie consent records: 12 months
  • Client project data: duration of engagement plus 6 years (legal/tax requirements)

Your Rights

Under the GDPR and UK Data Protection Act, you have the right to:

  • Access — Request a copy of the personal data we hold about you
  • Rectification — Request correction of inaccurate data
  • Erasure — Request deletion of your data ("right to be forgotten")
  • Restriction — Request that we limit processing of your data
  • Portability — Receive your data in a structured, machine-readable format
  • Object — Object to processing based on legitimate interest
  • Withdraw consent — Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at info@kaufast.com. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. In Spain: Agencia Española de Protección de Datos (AEPD). In the UK: Information Commissioner's Office (ICO).

Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children.

Security

We implement appropriate technical and organisational measures to protect your data, including HTTPS encryption, Content Security Policy headers, and access controls. However, no method of transmission over the internet is 100% secure.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

Contact

For questions about this Privacy Policy or to exercise your rights, contact us at: KAUFAST Carrer de la Ribiera 14, 08003 Barcelona, Spain Email: info@kaufast.com Phone: (+34) 689 219 866