LEGAL / GDPR COMPLIANT

Privacy Policy

Transparent details on the data we collect, how we use it, and how we keep it safe.

LAST UPDATED April 23, 2026
VERSION v1.0
JURISDICTION EU / GDPR
01

Who we are

Futura Web Design (hereinafter: "we," "us," or "the Company") operates the website futurawebdesign.com. We act as the data controller within the meaning of the General Data Protection Regulation (GDPR).

Email
[email protected]
Phone
(281) 715-0882
02

Data we collect

Depending on how you use our website, we may process the following categories of data:

  • Identity data: first name, last name, company name.
  • Contact data: email address, phone number.
  • Technical data: IP address, browser type, device, operating system, referrer URL.
  • Usage data: pages visited, time spent, interactions.
  • Communication data: content of messages you send us via the contact form.
  • Marketing data: newsletter preferences and consents (if you subscribed).
03

Purpose of processing

We process data strictly for clearly defined purposes:

  • Responding to inquiries submitted via the contact form.
  • Providing and improving the services we offer.
  • Sending newsletters (only with your explicit consent).
  • Site analytics and optimization (aggregated, anonymized).
  • Fulfilling legal and tax obligations.
  • Preventing fraud and abuse.
04

Legal basis

Data is processed in accordance with Article 6 of the GDPR, based on:

  • Your consent — for newsletters and non-essential cookies.
  • Performance of a contract — when you are a client or prospective client.
  • Legitimate interest — for basic analytics, security, and fraud prevention.
  • Legal obligation — for accounting and tax records.
05

Cookies & analytics

We use cookies to make the site functional and to understand how visitors interact with it.

You can adjust your cookie preferences at any time through the cookie banner.

06

Third parties

We only share your data with vetted service providers who are bound by contractual obligations:

  • Hosting: [hosting provider name] — EU data centers.
  • Email: [email provider] — for transactional and marketing messages.
  • Analytics: Google Analytics 4 (Google LLC).
  • Payments: Stripe Inc. (where applicable) — PCI DSS certified.
  • Marketing: Meta Platforms Inc. (only with your consent).

We never sell your data to third parties.

07

Your rights

Under the GDPR, you have the following rights regarding your data:

01 Right of access
02 Right to rectification
03 Right to erasure
04 Right to restriction
05 Right to portability
06 Right to object
07 Withdraw consent
08 Lodge a complaint

To exercise your rights, email us at [email protected]. We respond within 30 days.

08

Retention period

We keep data no longer than necessary:

Contact inquiries
up to 24 months from last communication
Newsletter
until you withdraw consent
Accounting records
10 years (legal requirement)
Analytics
up to 14 months (GA4 default)
Technical logs
up to 6 months
09

Data security

We apply appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse:

  • SSL/TLS encryption for all data in transit.
  • Encryption of databases at rest.
  • Access restricted to authorized personnel only.
  • Regular security audits and backup procedures.
  • Employee training on data protection.

In the event of a data breach, we will notify you and the competent authority within 72 hours.

10

Contact

For any questions regarding this privacy policy, please reach out: