Privacy Policy.

1. Data Controller

Sound And Lights Professional Services SRL
NIF: RO17747354
Ibiza, Spain
Email: naza@soundandlights.eu
Phone: +34 687 205 886

2. What Data We Collect

We collect the following personal data when you interact with our website and services:

• Contact & quote forms: name, email address, phone number, event dates, and your message.
• Orders (WooCommerce): billing name, address, email, phone number, payment details (processed by your chosen payment gateway — we do not store card numbers), and order history.
• Newsletter signup: email address only.
• Chat widget: when you contact us via WhatsApp or Telegram, your username and messages are handled by those platforms under their own privacy policies.
• Cookies & analytics: see Section 7 below.

3. Why We Collect It (Legal Basis)

Under the EU General Data Protection Regulation (GDPR), we process your data on the following bases:

• Contract performance (Art. 6(1)(b)) — to fulfil rental bookings, process shop orders, and deliver equipment.
• Legitimate interest (Art. 6(1)(f)) — to respond to quote requests, improve our services, and prevent fraud.
• Consent (Art. 6(1)(a)) — when you subscribe to our newsletter. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)) — to comply with Spanish tax and accounting laws.

4. How We Use Your Data

• To process and manage rental bookings and equipment sales.
• To send you quotes, invoices, and booking confirmations.
• To deliver newsletter emails (only if you subscribed).
• To respond to your enquiries via contact forms, email, WhatsApp, or Telegram.
• To comply with legal, tax, and regulatory requirements.

5. Who We Share Data With

We do not sell your personal data. We may share data with:

• Payment processors — to handle online transactions securely.
• Email services (MailerLite) — to deliver newsletters, if you have subscribed.
• Hosting provider — our web hosting provider processes data on our behalf under a data processing agreement.
• Tax authorities — as required by Spanish and EU law.

6. How Long We Keep Data

• Order data: retained for the legally required period (minimum 6 years under Spanish tax law).
• Quote/contact form data: retained for up to 24 months after the last interaction, then deleted.
• Newsletter subscribers: retained until you unsubscribe.

7. Cookies

This website uses the following cookies:

• Essential (WooCommerce): session cookies for cart functionality, login state, and checkout. These are strictly necessary and do not require consent.
• WordPress: a cookie to remember logged-in users.

We do not use third-party tracking or advertising cookies. If analytics are added in the future, we will update this policy and request your consent.

8. Your Rights Under GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data (where no legal retention period applies).
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — at any time, for consent-based processing.

To exercise any of these rights, email us at naza@soundandlights.eu. We will respond within 30 days.

9. Data Security

We protect your data using HTTPS encryption, secure hosting, and access controls. Payment data is handled entirely by PCI-DSS compliant payment gateways and is never stored on our servers.

10. Supervisory Authority

If you believe your data rights have been violated, you may file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — aepd.es).

11. Changes to This Policy

We may update this privacy policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Continued use of our website after changes constitutes acceptance.