Privacy information.

Information you provide

An enquiry can include your name, email address, role, company or brand, website and country or time zone, together with the service requested, garment description, product category, number of styles, development stage, available inputs, manufacturer status, budget and timing. Production enquiries can also request factory location and planned quantities.

Fields marked as required help us understand and respond to the request; optional fields can be left blank. No document uploads, payment information or newsletter subscription are required. Please avoid sensitive personal information, information about other people that is unnecessary, and confidential design files in the initial questionnaire.

When information is sent

The questionnaire prepares and classifies your answers in the browser. Flatfell does not transmit those answers through the direct-delivery service until you choose Send enquiry. Normal page requests still pass through hosting and security services, which receive technical connection information.

Direct delivery opens a Google Apps Script connection and sends the enquiry to the professional Google Workspace mailbox luis@flatfell.com. That connection can load Google's own technical resources. The delivery script does not read the inbox or create a second project database in Sheets. A temporary delivery identifier is used to acknowledge the result and prevent duplicate sending.

Open email app prepares a message in your own email service; you decide whether to send it there. Copy email text places the text on your device's clipboard. Your browser and email provider may have their own storage and privacy behaviour.

Purpose and legal grounds

The information is used to understand the requested work, clarify missing inputs, assess scope and availability, prepare a proposal and correspond about it. Where an individual asks for steps towards their own service contract, the relevant ground is Article 6(1)(b) GDPR. Handling professional representatives' contact details and the organisation's enquiry relies on legitimate interests in responding to the requested business communication, under Article 6(1)(f), where applicable.

Technical processing needed to operate the website and prevent abuse serves the legitimate interest in a working, secure enquiry channel. If a project proceeds, further administrative or legal records may be needed for the contract and applicable obligations.

An enquiry is not added to a mailing list. The questionnaire uses rules to highlight scope and missing information; a person reviews the business request. It does not automatically enter a contract or make a binding decision about a proposal.

Service providers and international processing

The website is hosted using OpenAI Sites and delivered with Cloudflare infrastructure and security. Google Apps Script and Google Workspace provide the enquiry-delivery and email functions. These providers receive the data needed for the functions described above and may keep their own technical or security records under their applicable terms.

Provider services can involve processing outside the European Economic Area. The relevant arrangements depend on the service and contract; Google publishes its Cloud Data Processing Addendum, and the hosting and security providers publish their privacy and transfer information. Contact luis@flatfell.com with questions about a particular enquiry.

Google data processing terms · Hosting privacy information

Retention

Enquiries and correspondence are held in the professional mailbox while they are needed to assess and follow up the request. For enquiries that do not lead to a project, the normal review point for deletion is 12 months after the last substantive contact. Ongoing negotiations, applicable obligations or the establishment, exercise or defence of claims can justify a different period; unnecessary information should be removed.

If a project proceeds, the retention of contractual, accounting and project records depends on their purpose and applicable obligations. The 12-month enquiry review is a manual procedure, not an automatic mailbox-deletion feature.

The delivery application also holds short technical reference records and counters, without storing the enquiry text or contact fields in those records. References older than 48 hours are cleared when subsequent submissions are processed; they may remain longer if there is no later activity. Providers' technical logs and backups follow the retention arrangements applicable to their services.

Your rights and privacy contact

You can write to luis@flatfell.com to request access, correction, erasure or restriction, or to object to processing; portability applies where its legal conditions are met. Explain the request and, if useful, include the enquiry reference. Proportionate additional information may be requested if needed to confirm identity. Please do not send an identity-document copy unless it has been specifically requested through an appropriate channel.

Requests are normally answered within one month. Where the GDPR permits an extension because of complexity or number of requests, you should be told within that first month. You can also complain to the Spanish Data Protection Authority (AEPD), or another competent supervisory authority. Contacting Flatfell first is not a condition for exercising that right.

AEPD — your rights

Cookies and updates

The separate Cookies page describes the technical cookies and external resources observed on this website. Changes to the form, providers or data uses require a review of this information. The incomplete operator identification is visible in the Legal notice and remains to be resolved.