Privacy policy.

This website, www.bajawell.com, is operated by Luis Pulido Díaz, an individual doing business as bajawell (“bajawell”, “we”, “us”). For the purposes of data protection law, Luis Pulido Díaz is the controller of personal information described in this policy.

Questions about privacy, or requests to exercise your rights, go to privacy@bajawell.com.

• We collect very little: the emails you send us, and basic, aggregated visit statistics.
• We do not sell your personal information, and we do not share it for advertising.
• The site does not use advertising trackers, and does not set cookies for analytics.
• You can ask us to access, correct or delete your information at any time.

Information you send us. If you email us (for example at hello@bajawell.com), we receive your email address, your name if you include it, and whatever you choose to tell us. We use it to reply, and to discuss and deliver work you ask about.

Usage data. When you visit the site, we use Vercel Web Analytics to understand how it is used. It records page views and similar events together with coarse, aggregated information such as referrer, country, browser, operating system and device type. It is designed to work without cookies and without building a profile that follows you across sites or visits.

Technical logs. Our hosting provider processes your IP address and request details (such as user agent and requested URL) to serve the site, keep it secure and prevent abuse. These logs are kept for a limited time.

We do not knowingly collect sensitive categories of data through this site, and the site has no accounts, forms or payment features. Please do not email us sensitive personal information unless we have agreed that you should.

• Respond to you and carry out the work you ask for — to take steps at your request before a contract, or to perform one (GDPR Art. 6(1)(b)).
• Operate, secure and improve the site — analytics, hosting logs and abuse prevention, based on our legitimate interest in running a safe, working website (Art. 6(1)(f)).
• Meet legal obligations — such as tax, accounting and responding to lawful requests (Art. 6(1)(c)).

We do not use your information for automated decision-making that has legal or similarly significant effects on you.

The site does not set advertising or analytics cookies. Your browser may store technical data strictly necessary to load the site. Because we do not use non-essential cookies, we do not show a cookie banner. If that changes, we will update this policy and ask for consent where the law requires it.

We do not sell personal information. We share it only with service providers that help us run the site and the business, under terms that limit their use of it:

• Vercel Inc. — hosting, delivery and web analytics for this site.
• Our email provider — to send and receive the messages you exchange with us.

We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a sale or reorganisation of the business (in which case we will make sure the new owner honours this policy).

Our providers operate globally, so your information may be processed outside the country where you live, including in the United States. Where the law requires, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision covering the recipient.

• Emails and project correspondence: as long as needed to handle your enquiry and any resulting work, and normally no more than three years after our last contact, unless a longer period is required for legal or accounting reasons.
• Analytics: aggregated and retained according to our analytics provider’s standard retention.
• Hosting logs: a short period set by our hosting provider.

Depending on where you live (including under the GDPR, UK GDPR, and laws in California and other jurisdictions), you may have the right to:

• access the personal information we hold about you and get a copy;
• correct information that is inaccurate or incomplete;
• ask us to delete your information;
• restrict or object to certain processing, including processing based on legitimate interests;
• receive your information in a portable format;
• withdraw consent where we rely on it, without affecting earlier processing;
• not be discriminated against for exercising these rights.

To exercise any of them, email privacy@bajawell.com. We may need to verify your identity first, and we aim to respond within 30 days. If you think we have handled your information unlawfully, you also have the right to complain to your local data protection authority.

We do not “sell” or “share” personal information as those terms are defined under California law.

We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS) and access controls on the systems we use. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects you, we will notify you and the relevant authorities as the law requires.

This site is intended for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, contact us and we will delete it.

The site may link to other websites, such as social profiles. We do not control them and are not responsible for their content or privacy practices. Check their policies before sharing information.

We may update this policy as the site or the law changes. The “last updated” date at the top shows when it last changed, and material changes will be made clear on this page.

Luis Pulido Díaz
Privacy: privacy@bajawell.com
Legal: legal@bajawell.com