Privacy policy
Updated on 8 November 2026.
Draft pending legal review. Some of the owner's details are still to be completed.
The legal texts are published in Spanish, which is the binding version. This English translation is provided for convenience.
Data controller
- Controller: uroboards
- Tax ID (NIF): pending
- Address: pending
- Contact: info@uroboards.com
What data we process and why
| Source | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact form | Name, email, phone (optional), model of interest, message, language and your IP address (to recognise and stop abuse) | Answer your enquiry and, if you ask, prepare your board | Your consent (form checkbox) | 12 months from sending; then deleted, unless there is an order |
| URO Board Designer waiting list | Email, intended use, language and your IP address (to recognise and stop abuse) | Let you know when places are available and invite you to create your account | Your consent | 12 months from signing up; then deleted, unless you already have an account. Earlier if you ask to be removed |
| Orders | Data needed to build and deliver the board and to invoice | Manage the order | Contract and legal obligations | Periods set by tax law |
| Statistics (Google Analytics 4) | Pseudonymised browsing data | Measure visits | Your consent in the cookie banner | See the cookie policy |
We do not make automated decisions or build profiles with your data.
Who we share it with
We do not pass your data on to third parties, except where required by law. We use providers that process it on our behalf:
- Hostinger, hosting of the website and of the database where form submissions are stored.
- Cloudflare, Inc., website delivery network, forwarding of email sent to info@uroboards.com and Turnstile: on the forms it checks that the sender is a person and not a program, using your IP and signals from your browser and device. Legal basis: our legitimate interest in protecting the forms from abuse. This may involve transfers to the USA covered by the EU-US Data Privacy Framework.
- Elastic Email, delivery of the email notifications generated by the forms.
- Google Ireland Ltd., Google Analytics, only if you accept analytics cookies. This may involve transfers to the USA covered by the EU-US Data Privacy Framework.
If you write to us on WhatsApp or Instagram, those platforms’ terms also apply.
Your rights
You can request access to, rectification, erasure, objection, restriction and portability of your data, and withdraw your consent at any time, by writing to info@uroboards.com. If you feel we have not handled your request properly, you can file a complaint with the Agencia Española de Protección de Datos, the Spanish Data Protection Agency (aepd.es).