Last updated: 8 October 2026

Template notice: this is a clear starting point covering the essentials of the EU GDPR. Please review it with a legal professional and adjust the details (company registration, exact retention periods, processors) before relying on it.

This Privacy Policy explains how Pelisson Production ("we", "us") collects, uses and protects personal data when you visit our website or contact us. We are based in Málaga, Spain, and we process personal data in line with the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The data controller is Pelisson Production. For any privacy question or request, contact us at hello@pelissonproduction.com.

2. What data we collect

Contact form data — the name, email, company, role, enquiry type, selected service, budget range, deadline and project brief you choose to send us, plus the source of your visit when it appears in the page address (UTM campaign tags or Google click IDs such as gclid; kept between pages only if you have accepted cookies). Purpose: to reply to your enquiry and prepare a quote. Legal basis: your consent, given with the form's checkbox. Recipients: our email inbox and our web host; we do not pass it to third parties for their own purposes. You can exercise your rights at any time (see section 7).
Newsletter data — if you subscribe to our newsletter, the email address (and optional name) you give us, plus a record of your consent. Legal basis: your consent; you can unsubscribe at any time by emailing us.
Technical data — basic information your browser sends automatically (e.g. IP address, device and browser type), and any logs created by our hosting and the third-party services below.

3. Why we use it, and the legal basis

To reply to your enquiry and provide quotes — legal basis: your consent and steps taken at your request prior to entering a contract.
To operate, secure and improve the website — legal basis: our legitimate interest in running a safe, functional site.

4. Third-party services we rely on

The site uses a small number of trusted third parties, which may process limited data on our behalf:

FormSubmit — delivers your contact-form message to our inbox.
Bunny Stream — hosts and streams the videos embedded on the site.
Google Fonts — serves the fonts used for the site's typography.
Our web host / CDN — serves the website and keeps basic security logs.
Google Analytics 4 (Google) — measures visits and site usage, only if you accept analytics cookies.
Google Ads (Google) — measures whether our ad campaigns lead to enquiries, only if you accept advertising cookies.
Cal.eu — books a call with us, on its own page or embedded on our contact page once you click to load it, when you choose to book one.

Each provider processes data under its own privacy terms. We do not sell your personal data.

5. Cookies and similar technologies

We use necessary technical cookies to run the site (for example, to remember your cookie choice). Only if you accept, we also use:

Analytics (Google Analytics 4): we measure visits and how the site is used, to improve it. Provider: Google. You can refuse or withdraw it at any time via “Cookie settings”.
Advertising measurement (Google Ads): we measure whether paid campaigns generate enquiries (conversions). We do not use this information to personalise ads unless you expressly choose to in the settings.

Until you accept, Google Analytics and Google Ads are not loaded. You can change your choice at any time with the “Cookie settings” link in the footer, and delete cookies from your browser.

Other third parties that may process technical data when their content loads: Bunny Stream (embedded video), Google Fonts (typography) and Cal.eu (when you book a call, on its own page). Google Analytics data is kept for the retention period set in our GA4 property (Google offers 2 or 14 months).

6. How long we keep your data

We keep contact-form messages only for as long as needed to handle your enquiry and any resulting project, after which they are deleted or anonymised. Technical logs are kept for a short period for security and troubleshooting.

7. Your rights

Under the GDPR you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
request deletion of your data ("right to be forgotten");
restrict or object to certain processing;
receive your data in a portable format; and
withdraw consent at any time.

To exercise any of these, email hello@pelissonproduction.com. You also have the right to lodge a complaint with your local data-protection authority (in Spain, the AEPD).

8. Data security & international transfers

We take reasonable technical and organisational measures to protect your data. Some of our providers may process data outside the European Economic Area; where they do, appropriate safeguards (such as standard contractual clauses) are intended to apply.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the latest version.