Privacy policy
Last updated: 25 July 2026
Who is responsible for your data
- Controller: Michael Cooke (autónomo), trading as Ashera Studios
- NIE: Z3771668H
- Address: Ronda del General Mitre, 199, 08023 Barcelona, Spain
- Contact: hello@asherastudios.com
What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| Your name | To reply to you properly | Steps taken at your request before entering a contract, GDPR Art. 6(1)(b) |
| Email address | To reply to you | Art. 6(1)(b) |
| Business name (optional) | To understand your situation | Art. 6(1)(b) |
| Your message | To answer your enquiry | Art. 6(1)(b) |
| Language of the page | To reply in your language | Art. 6(1)(b) |
| IP address | To limit automated spam submissions | Our legitimate interest in keeping the form usable, Art. 6(1)(f) |
We do not collect anything else. We do not use tracking cookies, we do not profile you, and we do not make automated decisions about you.
How long we keep it
Enquiries are kept for 24 months from your last contact with us, so we can follow up and keep a record of what was discussed. After that they are deleted. If you become a client, records are kept for the periods Spanish tax and commercial law require, generally six years.
Who else sees it
| Provider | What they do | Where |
|---|---|---|
| Lovable | Website hosting | United States |
| Supabase | Stores contact form submissions | United States (US East) |
| Resend | Delivers the notification email to us | United States |
| Google (Workspace) | Our email inbox | EU / United States |
| Umami | Anonymous, cookieless visitor statistics | European Union (Germany) |
We do not sell your data, and we do not share it with anyone for marketing.
International transfers
Some of our providers are based in the United States, and your enquiry is stored there. Specifically, contact form submissions are held by Supabase in a US East region, this site is hosted by Lovable in the United States, and Resend delivers our notification email from the United States. Our Google Workspace inbox may also be processed in the United States. Our analytics provider, Umami, stores its data in the European Union, so no transfer takes place there.
These transfers are made under the safeguards permitted by Chapter V of the GDPR. Where a provider is certified under the EU-US Data Privacy Framework, we rely on the European Commission's adequacy decision of 10 July 2023. Where a provider is not certified, which includes Supabase, we rely on the European Commission's Standard Contractual Clauses, together with the provider's transfer impact assessment and technical measures such as encryption in transit and at rest.
You can request a copy of the relevant safeguards by emailing hello@asherastudios.com. If you would rather your details were not stored outside the EU, email us directly instead of using the form.
Analytics
We use Umami, which counts page visits without cookies and without collecting personal data or tracking you across websites. There is no cookie banner on this site because we set no non-essential cookies.
Cookies
This site does not use advertising or tracking cookies. We only use cookies that are strictly necessary for the site to work, which under Article 22.2 of LSSI-CE do not require consent. Our analytics tool does not use cookies at all.
Your rights
You can ask us at any time to: see what data we hold about you (access); correct anything wrong (rectification); delete it (erasure); restrict how we use it; receive it in a portable format; object to us using it.
Email hello@asherastudios.com and we will respond within one month. If you are not satisfied, you can complain to the Agencia Española de Protección de Datos at aepd.es, C/ Jorge Juan 6, 28001 Madrid.
Changes
If we change this policy we will update the date at the top. Material changes will be flagged on the site.