Welcome to the website of www.elisaesteve.com ("we," "us," or "our"). We provide high-level executive marketing advisory services as a Fractional Chief Marketing Officer (CMO). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website www.elisaesteve.com (the "Site") or contact us via our web forms.

We process personal data in strict compliance with the European Union General Data Protection Regulation (EU GDPR), the Spanish Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD), the UK GDPR, and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Data Controller

For the purposes of European and UK data protection laws, the data controller is:

• Company/Individual Name: Elisabeth Esteve Jiménez

• Tax Identification Number: 28634365D

• Physical Fiscal Address: Calle laguna de las canteras, 6. Chiclana de la Frontera (11130), Cádiz. Spain

• Contact Email: Hello@elisaesteve.com

2. Personal Data We Collect

We collect information that you proactively provide to us, as well as data collected automatically through our website architecture:

• Voluntary Data: When filling out contact, consultation, or discovery call forms, you provide your name, professional email address, phone number, company name, LinkedIn profile, website URL, and details regarding your marketing challenges.

• Automated Data: When navigating our Site, we automatically collect technical identifiers via standard log files, including your IP address, browser type, operating system, referring URLs, pages viewed, geographic region, and access timestamps.

3. Legal Bases and Purposes of Processing

Under EU/UK GDPR Article 6 and PIPEDA consent principles, we process your personal data using the following legal grounds:

• Consent: To send marketing newsletters or respond to custom queries submitted via our forms. You can withdraw your consent at any time.

• Contractual Necessity: To take necessary steps at your request prior to entering into a formal Fractional CMO service agreement (e.g., booking a consultation or scoping an engagement).

• Legitimate Interests: To analyze website performance, optimize user experience, secure our website from cyber threats, and establish professional B2B communications.

4. Cookies and Tracking Technologies

Our Site utilizes standard cookies to ensure functionality and analyze anonymous traffic metrics.

• EU, Spain, and UK Visitors: Analytical or tracking cookies (such as Google Analytics or tracking pixels) are completely blocked by default until you provide explicit, affirmative consent via our cookie banner.

• Canadian Visitors: Consent may be implied for strictly functional cookies, but explicit consent is requested for marketing trackers.

• You can manage, block, or delete cookies at any time directly through your web browser settings.

5. Data Sharing and Third-Party Processors

We do not sell, rent, or trade your personal data. We share data only with trusted infrastructure providers necessary to run our business, operating under strict Data Processing Agreements (DPAs):

• Hosting and Design Platform: Hostinger International Ltd. (Cyprus / EU) – Website files and data submitted via web forms are securely hosted on servers located within the European Union, complying fully with EU data sovereignty and security standards.

• Scheduling Tools: Google Workspace, Calendly.

• Email & CRM Tools: Google Workspace, HubSpot.

6. International Data Transfers

Because our business operates from Spain, data collected from UK and Canadian users will be transferred to and securely stored within the European Union.

• Canada to EU: Covered under Canada’s PIPEDA adequacy status.

• UK to EU: Covered under the UK-EU mutual Adequacy Regulations.

• If any third-party tool processes data outside the EU/UK/Canada (e.g., in the United States), we enforce EU Standard Contractual Clauses (SCCs) to guarantee equivalent data protection.

7. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, manage our ongoing client relationships, or comply with statutory financial and legal retention periods under Spanish tax law. General contact inquiries are automatically deleted after [24 months] if no contractual engagement occurs.

8. Your Legal Rights (GDPR & PIPEDA)

You possess comprehensive rights regarding your personal information:

• Access and Portability: The right to request copies of your personal data in a structured, machine-readable format.

• Rectification: The right to demand correction of inaccurate or incomplete data.

• Erasure ("Right to be Forgotten"): The right to request deletion of your personal data under certain legal conditions.

• Restriction and Objection: The right to restrict processing or object to our processing based on legitimate interests.

• Withdraw Consent: The right to revoke consent at any time for data processing built upon your initial permission.

To exercise any of these rights, contact us directly at hello@elisaesteve.com.

• If you are an EU/Spanish resident and feel your rights were violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

• UK residents may contact the Information Commissioner’s Office (ICO).

• Canadian residents may contact the Office of the Privacy Commissioner of Canada (OPC).