Privacy Policy

Last updated: October 2025

1. General Information

This privacy policy explains how Javier Fernández ("we", "our"), trading as JavierNotion, collects, uses and protects your personal information when you use our website javiernotion.es and our Notion consultancy services.

We take your privacy seriously and comply with the UK General Data Protection Regulation (UK GDPR) and EU GDPR.

2. Data Controller

Name: Javier Fernández
Trading as: JavierNotion
Location: Manchester, United Kingdom
Contact: Via the contact form at javiernotion.es/en#contact

3. Data We Collect

We collect only the information necessary to provide our services:

  • Contact information: name, email address, message sent via contact form.
  • Technical information: IP address, browser type, language, pages visited, time on site (via technical cookies).
  • Project information: details shared during consultancy sessions, access to your Notion workspace (with your explicit permission), migration data provided voluntarily.

4. Legal Basis and Purpose

We process your data under the following legal bases:

  • Consent (Art. 6.1.a GDPR): When you submit the contact form or accept the cookie policy.
  • Contract performance (Art. 6.1.b GDPR): To provide contracted Notion consultancy services.
  • Legitimate interest (Art. 6.1.f GDPR): To improve user experience, web traffic analysis and business communications related to active projects.
  • Legal obligation (Art. 6.1.c GDPR): Retention of invoices and tax records as required by UK law.

5. How We Use Your Data

We use your personal information to:

  • Respond to your initial enquiry sent via the contact form.
  • Provide Notion consultancy services: system design, migrations, automation.
  • Send project documentation, manuals, videos and training materials.
  • Communicate with you about project progress and post-delivery support.
  • Comply with legal obligations (invoicing, tax records).
  • Improve our website and services through aggregated usage analysis.

6. Sharing Information with Third Parties

We do not sell, rent or share your personal information with third parties, except in the following cases:

  • Formspree: Contact form processor. Privacy policy
  • Notion: When working in your workspace, we only access with your explicit permission. Notion privacy policy
  • n8n / Make: Automation tools we may use in projects (always with your consent and configured in your own instance or account).
  • Gmail / Telegram / other APIs: If we configure automations connecting Notion with these platforms, data flows according to each service's terms.
  • Legal obligations: If required by law to disclose information to competent authorities.

7. International Data Transfers

Some of our service providers (such as Formspree, Notion) may be located outside the UK or European Economic Area (EEA). In such cases, we ensure appropriate safeguards exist, such as:

  • Standard contractual clauses approved by the European Commission.
  • Certification under recognised transfer frameworks (e.g. Data Privacy Framework).
  • Equivalent safeguards required by GDPR.

8. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described:

  • Contact enquiries: 2 years from last interaction or until you request deletion.
  • Active projects: During project duration plus a warranty period (typically 30-90 days).
  • Invoicing and tax records: Minimum 6 years (legal obligation in UK).
  • Technical data (cookies): See Cookie Policy.

9. Your Rights under GDPR

You have the following rights regarding your personal data:

  • Right of access (Art. 15): Request a copy of the data we hold about you.
  • Right of rectification (Art. 16): Correct inaccurate or incomplete data.
  • Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten").
  • Right to restriction of processing (Art. 18): Request we temporarily stop processing certain data.
  • Right to data portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format.
  • Right to object (Art. 21): Object to processing based on legitimate interest.
  • Right to withdraw consent: At any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us via the form at javiernotion.es/en#contact. We will respond within 30 days.

10. Information Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction or alteration:

  • HTTPS encryption across the entire website.
  • Restricted access to personal data (authorised personnel only).
  • Strong passwords and two-factor authentication on critical services.
  • Regular backups of project information.
  • Secure deletion of data when no longer needed.

11. Cookies and Tracking Technologies

We use essential technical cookies for website functionality. For more information, see our Cookie Policy.

12. Changes to This Policy

We may update this privacy policy occasionally. The "Last updated" date at the top indicates when it was last modified. We recommend reviewing this policy periodically. Substantial changes will be communicated via a notice on the website homepage.

13. Contact and Complaints

If you have questions about this privacy policy or how we process your personal data, contact us via the form at javiernotion.es/en#contact.

You also have the right to lodge a complaint with the competent supervisory authority:

  • UK: Information Commissioner's Office (ICO) - ico.org.uk
  • Spain: Agencia Española de Protección de Datos (AEPD) - aepd.es