Privacy policy

1. What we collect

Server logs. Our hosting provider records the technical details of each request needed to serve and secure the Site: IP address, date and time, URL requested, response status, referring page, and browser and operating system (user-agent).

Contact form. If you use it, we receive your name, your email, your company (optional), the service and budget you pick, and your message. Using it is optional. The form is delivered to our inbox through Web3Forms, a form-delivery service. Along with what you type, it sends these technical details: the language and the page you send it from, the campaign parameters in the URL (utm_source, utm_medium, utm_campaign, utm_term and utm_content), the referring page (referrer) and, only if you have accepted measurement, the Google Ads click identifier (gclid).

Self-assessment. If you send it, we receive through the same channel (Web3Forms) your email, your Yes/No answers, your score, the recommended areas and the page you send it from.

Email and bookings. If you email us, we receive whatever you put in the email. If you book a call, the link takes you to Google Calendar, which handles your data under Google's policy.

Measurement and advertising, only if you accept. If you accept in the cookie notice, the Site loads Google tags (Google Analytics 4 and Google Ads), the X (formerly Twitter) tag, and Vercel Web Analytics and Speed Insights. They tell us how the Site is used, whether our ads lead to enquiries, and how fast pages load. They process data such as the page URL, referring page, device and browser type, an approximate location derived from the IP address, online identifiers, and Site events (for example, a form submission). If you reject, or until you choose, none of this loads.

Your cookie choice. The Site stores whether you accepted or rejected in your browser's local storage so it does not ask again.

2. Why we use it, and our legal basis

Serving the Site and keeping it secure: our legitimate interest in a working, secure website (GDPR Art. 6(1)(f)).

Replying to your form or email: our legitimate interest in answering you and, where it concerns a possible contract, steps taken at your request before entering into it (Art. 6(1)(b)).

Measurement, advertising and performance (Google, X, Vercel Web Analytics and Speed Insights): your consent (Art. 6(1)(a), and Art. 22.2 of Spanish Law 34/2002, LSSI-CE, or the equivalent rules elsewhere), which you can withdraw at any time.

Complying with legal obligations and defending legal claims: Art. 6(1)(c) and 6(1)(f).

We do not make automated decisions that have legal effects on you.

3. Who we share it with

We do not sell your personal data. The providers involved in the Site are:

Vercel Inc.: hosting and delivery of the Site (server logs). With your consent, also Vercel Web Analytics and Speed Insights: aggregate visit counts and performance metrics, with no cookies.

Web3Forms: delivers contact-form and self-assessment messages to our inbox, with the data described in section 1.

Google LLC (Google Analytics 4 and Google Ads), only with your consent: Site analytics and ad conversion measurement.

X Corp. (X tag), only with your consent: measuring ad conversions on X.

Our email provider: receiving and sending email.

Google and X may also process this data for their own purposes under their privacy policies (policies.google.com/privacy and x.com/privacy). We may also disclose data where the law requires it.

4. Retention

We keep form messages and emails for as long as needed to handle your enquiry and, afterwards, while legal, tax or legal-defence obligations require. Server logs and measurement data are kept under each provider's retention settings. To ask us to delete your correspondence, email contact@a2group.llc.

5. International transfers

A2GROUP LLC and several of its providers are in the United States. When your data leaves the European Economic Area, the UK or Switzerland, we rely on the mechanisms the law provides, such as the European Commission's Standard Contractual Clauses or, where the provider is certified, the EU-U.S. Data Privacy Framework. You can ask us about these safeguards at contact@a2group.llc.

6. Cookies and how to withdraw consent

Without consent, the Site only stores your cookie choice in your browser's local storage (key a2_consent) and, when you send a form or tap the WhatsApp link, an identifier for that submission or click in session storage (keys a2_lead_attempt:*, a2_wa_attempt:* and a2_conv_sent:*), which stops it being counted twice and is deleted when you close the tab. These are strictly necessary and need no consent.

If you accept, Google may set first-party cookies such as _ga, _ga_* and _gcl_* to tell visits apart and measure conversions, and X may use its own cookies to measure ad conversions. Vercel Web Analytics and Speed Insights use no cookies.

Rejecting is as easy as accepting. You can change your mind at any time with the “Cookie settings” button in the footer or the one below: when you reject, the Site stops sending data, deletes Google's cookies on this domain and reloads without any of these tools. You can also delete or block cookies in your browser.

7. Your rights

Under the GDPR and the UK GDPR you can access, rectify or erase your data, restrict or object to its processing, ask for portability, and withdraw consent at any time without affecting processing carried out before. Email contact@a2group.llc.

You can complain to a supervisory authority; in Spain, the Agencia Española de Protección de Datos (aepd.es); in the UK, the Information Commissioner's Office (ico.org.uk).

8. Children

The Site is aimed at businesses and professionals. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.

9. Changes

If we change this policy, we will post the new version here with its date. If we add new non-essential tools, we will update this policy and ask for your consent before they run.