Privacy policy
Last updated: 29 September 2026
Controller
Arturo Ferrándiz Fernández, trading as 402Scope Compliance, NIF 49230325K, Avenida Blasco Ibáñez 134, Valencia, Spain. Contact: hello@402scope.org.
What data I process and why
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Answering your enquiries and booking calls | Name, email, company, message, call time | Steps at your request before a contract, Art. 6(1)(b) | Up to 12 months after the last contact |
| Delivering the review and the Launch Pack | Contact details, project materials you send, call notes | Performance of a contract, Art. 6(1)(b) | Duration of the engagement plus 6 years for liability |
| Invoicing and accounting | Name, company, tax ID, address, amount paid | Legal obligation, Art. 6(1)(c) | Periods required by Spanish tax and commercial law |
| Payments in USDC on Stellar | Sending wallet address, transaction hash, amount | Performance of a contract and legal obligation, Art. 6(1)(b) and (c) | Periods required by Spanish tax and commercial law |
| Website scanner | The web address you enter; your IP address is processed by Cloudflare to deliver the request | Steps at your request, Art. 6(1)(b), and legitimate interest in security, Art. 6(1)(f) | The result is cached for 1 hour to avoid repeat fetches, then deleted. Not linked to you and not used to contact you |
| Aggregate website statistics | Anonymous page views, no cookies | Legitimate interest, Art. 6(1)(f) | Aggregated, no personal profiles |
I do not sell your data, use it for automated decisions or send you marketing emails unless you ask for them.
Who receives the data
Service providers that process data on my behalf under a data processing agreement:
- Stripe (card and stablecoin payments)
- Cal.com (call scheduling)
- Tally (intake form)
- Google Workspace (email and document storage)
- Cloudflare (website hosting and anonymous statistics)
- [invoicing software] (invoicing)
Some of these providers are based in or may transfer data to the United States. Those transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.
Payments on public blockchains
A USDC payment on Stellar is recorded on a public blockchain that anyone can read. That record cannot be changed or deleted by me or by you. I only link your wallet address to your identity in my own invoicing records.
Your rights
You can ask to access, correct, erase, restrict or port your data, and object to processing, by writing to hello@402scope.org. You can also withdraw any consent at any time. If you think your rights have not been respected, you can complain to the Spanish Data Protection Agency (AEPD) at www.aepd.es.