Privacy Policy
Spanlounge's privacy policy outlines how we collect, process and store your personal information, along with your associated rights. We prioritise privacy by gathering only essential data required to operate the website and address your enquiries.
1. Who we are
Data controller:
- Name: the Spanlounge team
- Website: https://spanlounge.com
- Email: [email protected]
For privacy matters please contact us at [email protected].
2. Privacy contact
The Spanlounge team is jointly responsible for privacy. You can reach us by email at [email protected]. Our usual response time is 1–5 business days.
3. What we collect
Spanlounge is designed to minimise data collection. In practice, the information gathered falls into three distinct categories:
3.1 Contact form submissions
When you send us a message through the contact form or by email, we receive:
- the name you have given us;
- your email address;
- the content of your message.
3.2 Technical server logs
For the site to operate, our server may temporarily log:
- your IP address in a shortened form;
- the browser type and version;
- your operating system;
- the time of the visit and the page you viewed.
We retain this information for a maximum of 14 days on security grounds and do not associate it with any identifying personal information.
3.3 Cookies
We use strictly necessary cookies to keep the site operating—for instance, to retain your cookie consent decision. Should you accept analytics or marketing cookies separately, third-party providers may set some of these. See our Cookie Policy page for further detail.
4. Purposes and lawful basis for processing
We handle personal data for the stated purposes and legal bases in accordance with the United Kingdom's Privacy Act 2020 and the OPC's Information Privacy Principles.
- Processing your enquiry: we use the information you provide to reply to your message (IPP 1, IPP 10).
- Site operation: server logs are processed for the security and integrity of the site (legitimate interest, IPP 5).
- Optional cookies: analytics and marketing cookies are deployed solely with your explicit consent (IPP 3, IPP 10).
- Legal compliance: we may process information to comply with a statutory obligation or a court order (IPP 11).
5. Retention
- Contact correspondence: kept for a maximum of 12 months, unless the nature of the exchange necessitates an extended retention period.
- Server logs: no more than 14 days.
- **Cookies:** cookies retained for no longer than 12 months, with specifics detailed on our Cookie Policy page.
Information that is no longer needed is deleted or anonymised at the end of its retention period.
6. Who can access your information
Spanlounge does not sell personal information to third parties. Your data may be shared or processed in the circumstances listed below:
- hosting partners and technical contractors (processors) who act upon our written instructions;
- government agencies if required by law.
7. Cross-border transfers
Spanlounge's core technical infrastructure operates within Australia and the United Kingdom. Where information transfers beyond UK borders—such as to US-based service providers—such transfers occur exclusively with safeguards aligned to IPP 12, employing contractual protections that guarantee privacy standards equivalent to those mandated by the Privacy Act 2020.
8. Your rights
Under the Privacy Act 2020 you have the following rights:
- **Access (IPP 6):** the right to ascertain whether we hold personal information about you and to receive a copy.
- Correction (IPP 7): the right to have inaccurate information corrected.
- **Erasure:** the right to request deletion of your personal data in specific circumstances.
- **Restriction:** in certain circumstances, you have the right to restrict how your data is processed.
- Portability: the right to receive your information in a structured, machine-readable format.
- The right to lodge an objection to any processing of your personal data carried out on the basis of legitimate interest.
- Withdrawal of consent: if processing is based on your consent (for example, cookies), you may withdraw it at any time.
Requests can be sent by email to [email protected]. We will respond within 20 working days at the latest.
9. Complaints to the regulator
If you believe your information has not been handled in accordance with the law, you may lodge a complaint with the Office of the Privacy Commissioner:
- Office of the Privacy Commissioner: privacy.org.nz
- Post: PO Box 10094, Wellington 6143
- Phone: 0800 803 909
10. Security
The platform employs HTTPS encryption to safeguard data. Personal details are managed with care, accessible only to staff requiring such information for their duties. Routine security updates and established best practices form the foundation of our operations.
11. Children
Spanlounge is an adults-only platform (18+). We do not knowingly gather information from minors. Should a parent or guardian become aware that a child has submitted details, please contact us and we shall delete them promptly.
12. Changes to this policy
We may revise this policy as our practice evolves or legislation changes. Significant amendments will be noted on the site, with the most recent update date displayed at the top of this page.
In short: we collect as little as possible, we don’t sell information, you have clear rights that we respect. Requests: [email protected].