Privacy Policy

Last updated: 14 August 2026

This policy explains what personal data AHS collects through this website, why it is collected, how long it is kept and what rights you have over it. AHS is a web design studio operated by Antonio Hernandez Steen, an independent professional (autónomo) registered in Spain and based in the Canary Islands. For the data described here, AHS is the data controller.

Questions, or any request about your data, can be sent to contact@ahsteen.com.

1. What we collect and why

Enquiries you send us

When you submit the contact form, we collect your name, email address, phone number if you provide one, the type of project and business you select, and the message you write. This is used for one purpose only: to reply to you and discuss the work you are asking about. The legal basis is our legitimate interest in responding to a business enquiry, and the steps taken at your request before entering into a contract.

Form submissions are not stored in a database on this website. Each enquiry is delivered to us as a single email and lives in that mailbox, which is hosted on Hostinger’s mail servers.

Technical data

Like almost every website, this one records standard server log data when a page is requested, including your IP address, browser and device type, the page requested and the time of the request. This is generated by our hosting provider and by our security plugin, and is used to keep the site running and to detect and block malicious activity. The legal basis is our legitimate interest in the security and integrity of the site.

Client project data

If you become a client, we hold the contact and billing details needed to carry out the work and to meet Spanish invoicing and tax obligations, plus any access credentials you choose to share with us. The legal basis is performance of our contract with you and compliance with our legal obligations.

2. What we do not do

We do not run advertising trackers on this site, we do not build advertising profiles, we do not sell or rent your personal data to anyone, and we do not use your data for automated decision-making. We do not send marketing emails to people who have simply submitted an enquiry.

3. Cookies and similar technologies

This site uses a small number of cookies. Some are strictly necessary for the site to function, for security, and to remember your cookie choices. Others may be set only if you consent through the cookie banner. You can change or withdraw your choice at any time through the banner’s reopen control, and you can block or delete cookies in your browser settings, though parts of the site may then not work as intended.

The site also offers an accessibility widget which stores your display preferences and collects anonymous usage statistics so the tool can be improved.

4. Who else handles your data

We keep the number of third parties to a minimum. Those involved in running this site may include:

  • Hostinger — website hosting, domain and email hosting, and the delivery of enquiry emails.
  • Wordfence — website security and firewall, which processes IP addresses to block attacks.
  • Elementor — the page building and website platform used to run the site.
  • Accessibility and cookie consent tools embedded in the site.

Each acts as a processor or independent controller under its own terms. Where a provider processes data outside the European Economic Area, that transfer is covered by the safeguards permitted under the GDPR, such as Standard Contractual Clauses.

5. How long we keep it

  • Enquiries that do not become projects: kept for up to 24 months, then deleted.
  • Client records, contracts and correspondence: kept for the duration of the relationship and for as long afterwards as we may need them to defend a legal claim.
  • Invoices and accounting records: kept for the period required by Spanish tax law.
  • Server and security logs: kept for a short rolling period, typically no more than 30 days.

6. Your rights

Under the GDPR and Spanish data protection law you have the right to ask for a copy of the personal data we hold about you, to have inaccurate data corrected, to have your data deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time without affecting anything done before you withdrew it.

To exercise any of these, email contact@ahsteen.com. We will respond within one month. If you are not satisfied with our response, you have the right to complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es), or to the supervisory authority in your own country.

7. Security

The site is served over an encrypted HTTPS connection and is protected by a firewall, malware scanning and login protection. Access to the systems holding your data is limited and protected by strong passwords and two-factor authentication. No system is perfectly secure, but we take the protection of your data seriously and review these measures regularly.

8. Children

This site offers business services and is not directed at children. We do not knowingly collect personal data from anyone under 14, the age of digital consent in Spain.

9. Data we process for clients

When we build or maintain a website for a client, we may have access to personal data belonging to that client’s own customers. In that situation we act as a processor on the client’s instructions, we use the data only to deliver the agreed services, and we do not use it for any purpose of our own.

10. Changes to this policy

If this policy changes, the revised version will be published on this page with a new date at the top. Material changes affecting how we use your data will be made clear.

11. Contact

AHS — Antonio Hernandez Steen, Santa Cruz de Tenerife, Canary Islands, Spain. Email: contact@ahsteen.com. See also our Terms of Service.