Privacy Policy

1. Controller

Prestige Care is operated by Aiona Yakubovskaya, an autónomo, NIE Y4116719D, with professional and fiscal address at Calle Alvarez Quintero 4, 1 IZQ, Fuengirola, Malaga, Spain.

Privacy contact: prestigecarespain@gmail.com. A Data Protection Officer is not appointed because one is not required for the current activity.

2. Data and collection channels

• Contact and identification details that you provide through the website request form, by email or through WhatsApp.
• Service address, service request, photographs and messages that you choose to send.
• Quotation, booking, payment and invoicing information where a service proceeds.
• A website form request is recorded as a Service Request in Prestige Care’s private PostgreSQL Core. Any later WhatsApp exchange or photographs are optional and can be linked to that existing request.
• For a request following a Google Ads click, we may retain Google campaign context and a provider-reported coarse physical-location ID associated with the click. Google derives this best-effort area from provider signals; it is not GPS, a street address or a guarantee of residence. We do not collect raw IP addresses, device fingerprints or precise device coordinates for this purpose.
• Technical request data needed to deliver the website. Under Advanced Consent Mode V2, Google may receive cookieless consent and measurement signals while storage remains denied; analytics cookies and consented analytics are enabled only after analytics consent.

3. Purposes and legal bases

• Answer enquiries and prepare quotations: pre-contractual steps requested by you.
• Arrange and provide services, manage payments and aftercare: performance of a contract.
• Issue invoices and comply with tax or legal duties: legal obligation.
• Manage service quality, incidents and legal claims: legitimate interests, balanced against your rights.
• Use limited first-party acquisition and coarse provider-location context for paid-acquisition attribution, traffic and fraud/security analysis, service-area analysis and territory performance: Prestige Care’s legitimate interests, subject to necessity, minimisation and a balancing assessment. This data is not used here for remarketing.
• Use consent-dependent website analytics: consent. No advertising or remarketing tags are active.

4. Recipients and international transfers

Vercel provides website hosting and the server-side form endpoint. Authenticated private orchestration records the request in Prestige Care’s PostgreSQL Core and sends the Owner a private operational notification through Telegram. WhatsApp/Meta processes data only when you separately choose that channel. The authorized Prestige Care email service is used for email communications. Google Tag Manager loads under a denied-by-default consent state and Google may receive cookieless consent and measurement signals; GA4 analytics storage is enabled only after analytics consent.

Some providers may process data outside the European Economic Area under their own lawful transfer mechanisms. Data may also be disclosed to advisers, payment providers or public authorities when required for the service or by law.

5. Retention

Enquiries that do not lead to a service are kept only as long as reasonably needed for follow-up. Contract, invoice and tax records are kept for the periods required by law. Service photographs and incident records are kept only as long as needed for service delivery, evidence or claims. Coarse Google Ads physical-location context linked to a Service Request is minimised after 12 months; protected click-level reconciliation context is removed after 90 days. Analytics retention is governed by the configured GA4 settings and your consent.

6. Your rights

You may request access, rectification, erasure, restriction, portability or objection, and may withdraw consent at any time without affecting earlier lawful processing. Send your request to prestigecarespain@gmail.com and include enough information to identify the request. You may complain to the Spanish Data Protection Agency (AEPD) at aepd.es.

7. Security, minors and changes

Reasonable technical and organizational measures are used to protect personal data. Please do not send unnecessary sensitive information. The website is not directed to minors. This policy may be updated when the service or technology stack changes; material changes to consent-dependent tools require an updated policy and, where necessary, renewed consent.