Privacy Policy
Who we are
MUSED, S.L. — NIF B26982082 — Calle Santa Engracia 165, 3C, 28003 Madrid, Spain. Email: hello@mused.design · Registered at [Registro Mercantil de ___, Tomo ___, Folio ___, Hoja ___]
We are the controller of the personal data collected through mused.design. We have not appointed a Data Protection Officer, as we are not required to. Any privacy question can go to the email above.
This policy doesn’t cover sites we link to — they have their own.
What we collect and why
Contact form: your name, email, phone, company, how you found us, and whatever project details you share (industry, budget, goals, references), plus the date you sent it · To read your message, reply, and keep a record of it · Legal basis: to take steps at your request before a possible contract. If your message isn’t about our services, your consent — given by sending the form
Server logs: IP address, browser, operating system, referring page, pages viewed, time of access · To deliver the site, keep it secure and working, and spot abuse · Legal basis: our legitimate interest in running a secure, functioning website. We don’t use these logs to identify or profile visitors
Analytics (Google Analytics 4 — Google Ireland Ltd): a pseudonymous ID, pages visited, time on page, approximate location, device and browser details, how you got here · To see how the site is used overall so we can improve it · Legal basis: your consent, via our cookie banner
Advertising (Meta Pixel — Meta Platforms Ireland Ltd; Google Ads tags — Google Ireland Ltd): a pseudonymous ID, pages visited, actions taken (such as sending the form), device and browser details. If you’re logged in with that provider, they may link the visit to your account · To measure our ads and show them to you elsewhere · Legal basis: your consent, via our cookie banner
Giving us your details is up to you, but we can’t reply without a name and a way to reach you.
Our advertising tools involve profiling for marketing purposes. This has no legal or similarly significant effect on you, and we make no automated decisions about you. Withdraw your cookie consent, and it stops.
For the Meta Pixel, we and Meta are joint controllers for collecting your data and sending it to Meta; the essence of that arrangement is in Meta’s Controller Addendum. What Meta then does with the data is Meta’s own responsibility, under its privacy policy. You can exercise your rights with either of us, and we’ll pass on anything that concerns Meta.
Cookies
Only strictly necessary cookies are set when you arrive. Everything else waits for your active consent. Accept all, reject all, or choose by category — rejecting is as easy as accepting, and it doesn’t limit your access to the site. Change your mind any time via Cookie settings in the footer, or through your browser.
Every cookie we use, with its name, provider, purpose, and duration, is listed in our Cookie Policy.
Who we share it with
We don’t sell your data. We share it with:
Providers working on our instructions, each under a data processing agreement: Webflow, Inc. (US) — hosting and contact form storage; [email/productivity provider]; Google Ireland Ltd (analytics, ads); Meta Platforms Ireland Ltd (ads).
Our lawyers, accountants and auditors, where needed and under a duty of confidentiality.
Authorities, courts or law enforcement, where the law requires it.
Data sent outside Europe
Webflow, Google and Meta process data on servers outside the EEA, mainly in the United States. Those transfers are covered by the EU–US Data Privacy Framework where the recipient is certified, or by the European Commission’s Standard Contractual Clauses with additional safeguards where needed. Email us for a copy.
How long we keep it
Contact form enquiries · Until we’ve dealt with your enquiry, then 12 months. If you become a client: for our relationship plus the legal periods below
Server and security logs · 6 months
Cookie consent records · 24 months, as proof consent was given
Analytics · 14 months (Google Analytics setting)
Advertising data · Per each platform’s settings
Accounting and tax records · 6 years (Commercial Code) and 4 years (General Tax Law)
After that, data is deleted or permanently anonymised — unless we need to keep it blocked to defend a legal claim, in which case only the courts and authorities can access it until the deadline passes.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or send it to another provider (portability). You can object to processing based on our legitimate interest, and to direct marketing at any time without giving a reason. Where we rely on consent, you can withdraw it at any time — that doesn’t affect anything we did beforehand.
How: email hello@mused.design or write to our address, saying which right you want to use. We may ask you to prove who you are if we have real doubts. We’ll reply within a month, or tell you within that month if a complex request needs up to two more. It’s free, unless a request is clearly unfounded or excessive.
If you’re unhappy, please tell us first so we can fix it. You can also complain at any time to the Agencia Española de Protección de Datos — C/ Jorge Juan 6, 28001 Madrid — www.aepd.es — 901 100 099 / 912 663 517. If you live or work in another EU country, you can go to your own authority instead.
Security & children
We protect your data with encryption in transit (HTTPS/TLS), access controls, regular updates and backups. No system is perfect, but we review our measures and will notify you and the AEPD of a breach where the law requires it.
The site isn’t aimed at children, and we don’t knowingly collect data from anyone under 14 — the age of digital consent in Spain. If you think a child has sent us data, tell us and we’ll delete it.
Changes
We may update this policy. The date at the top shows the last revision, and we’ll post a prominent notice for any material change — and ask for your consent again where that’s required.
MUSED, S.L. · Calle Santa Engracia 165, 3C, 28003 Madrid · hello@mused.design