Last updated: September 23, 2026
This page explains what personal data this website collects, why, and what your rights are. In short: the site only collects what you choose to send through the contact form, and it does not use tracking cookies.
Who I am
This website, laurahiribarren.com, is the portfolio of Laura Hiribarren Cranford, an interior designer based in Barcelona, Spain. I am responsible for the personal data collected through this site (the “data controller”). For any question about this policy or about your data, you can write to me through the contact form.
What data is collected
When you send a message. The contact form asks for:
- your name,
- your email address,
- your message,
- the page you wrote from (for example, the project you asked about), added automatically.
To protect the form against spam, the site also keeps a hashed identifier derived from your IP address for 10 minutes, so that it can limit the number of messages sent in a short time.
When you browse the site. Like any website, the hosting provider’s servers automatically record technical information (IP address, browser type, pages requested, date and time) in log files. These logs are used for security and to keep the site running.
The site has no user accounts, no newsletter and no comments, and it does not use any audience measurement, advertising or social media tracking tools.
Cookies
This site does not place cookies on visitors’ devices. Its fonts are hosted on the site itself, so no request is made to Google Fonts or similar services. Cookies are only used when an administrator logs in to manage the site.
The LinkedIn and Substack links take you to those websites, which apply their own privacy policies. No content from these services is embedded on this site.
Why your data is used
- To reply to your message and discuss a project, a collaboration or a job opportunity. Legal basis: steps taken at your request before a possible contract, and my legitimate interest in answering the messages I receive (Article 6.1.b and 6.1.f GDPR).
- To protect the site against spam and abuse. Legal basis: legitimate interest (Article 6.1.f GDPR).
Your data is never sold, and it is not used for marketing or newsletters.
Who can access it
- Me, Laura Hiribarren Cranford: messages are saved in the website’s administration area and sent to my email inbox.
- The website’s hosting provider, which stores the site, its database and the server logs.
- My email provider, Microsoft (Outlook.com), which delivers the messages to my inbox. Microsoft may process this data outside the European Union, under the safeguards required by the GDPR.
Your data may also be disclosed if the law requires it.
How long it is kept
- Messages: as long as needed to follow up on your request, and no longer than two years after our last exchange, unless we start working together.
- Anti-spam identifier: 10 minutes.
- Server logs: for the limited period set by the hosting provider.
Your rights
Under the General Data Protection Regulation (GDPR) and the Spanish data protection law (LOPDGDD), you can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. To exercise these rights, simply send me a message. I will answer within one month.
If you believe your data is not handled properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
Security
Access to the messages is restricted to the site administrator, and the data is only used for the purposes described above.
Changes to this policy
This policy may be updated, for example if the site gets new features. The date of the latest update is shown at the top of this page.