Privacy policy.
This page explains the data we receive, why we use it and how to contact us about your privacy.
Who is responsible
The controller is Edu Lopéz de la Torre, an individual who manages the Arkenesis project from Japan. For privacy matters and requests about your data, email info@arkenesis.com. The controller’s address in Japan will be provided without undue delay upon request to that email address. This policy covers the website and enquiries received through the form, email or Instagram messages.
Data we receive
The form asks only for your email and whether the project is personal or for your business. It also sends the page language so we can respond in that language. It does not ask for a description or a timeframe. If you contact us by email or Instagram, we also receive your account identifier and the content you send. Hosting and delivery services receive technical information needed for the connection, such as IP addresses and browser details. Avoid including passwords, identity documents or particularly sensitive information in an initial enquiry. The form also uses a random identifier to avoid duplicates when retrying and an IP-based attempt limit. The function does not create an enquiry database or include enquiry content in its diagnostic messages.
How we use enquiries
We use the data to contact you by email, understand what you need, assess whether we can carry out the work and prepare a quote. We do not use an enquiry email address to subscribe you to newsletters or send promotions. If an agreed service needs more information, we will explain the relevant processing before requesting it.
Who can access enquiries
Edu Lopéz de la Torre manages Arkenesis from Japan. Bryan García also helps handle enquiries and accesses them from Spain. Access must be limited to authorised people and what is necessary to handle each request. Enquiry content is not published on the website.
Services involved
The form sends your email, project type and language to an Arkenesis function hosted on Cloudflare. The function uses Resend to send a predefined notification to contact@arkenesis.com in Aster Mail. It does not send an automatic reply to visitors: the team starts a new email to contact you. Emailing us directly bypasses the form delivery service. Cloudflare hosts and delivers the website and may process technical data and connection logs needed for operation and security. ImageKit serves the team photographs and receives the usual technical data for those requests, such as IP address and browser. Fonts and Miora screenshots are served from this website. If you contact us on Instagram, the communication is also processed on Meta’s platform under its own terms. Google is involved only if you accept analytics, as explained below.
Links to other websites and social media
The website links to Miora, Instagram, Facebook, X, TikTok and YouTube, as well as information about laws and service providers. These are external links: the landing page does not embed their videos or social feeds. If you open them or contact us within those platforms, their own privacy policies and settings apply. The Miora screenshot is a local image and does not load the Miora website inside this site.
Manual deletion and retention
We undertake to manually delete enquiries that do not lead to a contract from our mailboxes and working copies 30 days after the initial enquiry was received. Replies do not restart this period. This commitment concerns copies we manage: it does not guarantee simultaneous deletion of providers’ backups or the sender’s own copies. Aster states that backups may persist for up to 13 months. Resend states 30-day retention for email and log data on its free plan and seven-day backups; these periods are separate from our manual mailbox deletion. On Instagram we will use the deletion options available for our inbox, without promising deletion from Meta’s systems. If a contract is agreed, necessary data will follow the retention periods for that relationship and applicable legal obligations.
International processing and applicable rules
The main reference is Japan’s Act on the Protection of Personal Information, APPI. Handling enquiries involves access from Japan and Spain and services that may process data in other countries. We do not claim that all information is stored in Japan. You may request further information about providers and international processing at info@arkenesis.com. The controller’s location does not exclude mandatory rules applicable in other territories, including the GDPR where relevant.
Google Analytics and cookies
We use Google Analytics 4 (GA4) for usage statistics only after you accept analytics. Google may process technical data such as IP address, browser, device and pages visited. Our code disables Google Signals and advertising personalisation features. We do not send email addresses, project types or other form data to Analytics; the page views we configure omit URL query parameters and fragments. You can accept, reject or withdraw your choice through “Analytics preferences” in the footer. We store that choice in your browser’s local storage for 180 days; it is not shared across devices. Rejecting or withdrawing permission blocks further measurement by this property and removes its Analytics cookies accessible to the website. Withdrawal does not automatically delete data already sent to Google. Analytics cookies _ga and _ga_7SEGPWCFXF are configured for 60 days without automatic renewal. The chosen retention period for GA4 event-level and user-level data is two months; this is a setting in the Google Analytics property and does not delete aggregated reports or determine enquiry deletion. Rejecting analytics does not prevent browsing or contacting us. Analytics does not load without JavaScript. We do not use Google reCAPTCHA.
Language and data in your browser
When you enter the root of the website, we use your browser languages to choose Spanish, English or Japanese. The choice is made in your browser and reflected in the URL; we do not store a persistent language preference. While the page is open, the code retains the email you entered, the project type and a random identifier to allow retries without duplicating a confirmed submission. The code does not save that form data in cookies or local storage. Any autofill offered by your browser depends on its own settings.
People under 18
We may consider work requested by people under 18 with permission from their legal representative. Before the service starts, the representative must contact us or confirm the permission. If we receive a minor’s data without the required permission, we will seek their representative’s involvement or delete the data where appropriate. We will request only the information needed to check that permission.
Your requests and rights
You can request information about data use, access, correction, deletion or an end to use or disclosure, in the circumstances provided by applicable law, by emailing info@arkenesis.com. We will respond without undue delay and within applicable deadlines, requesting additional identification only where necessary. Where the GDPR applies, you may also exercise applicable rights to restriction, objection and portability, withdraw consent and complain to the competent authority. The Japanese supervisory authority is the Personal Information Protection Commission, PPC.
Purposes and bases where the GDPR applies
Where the GDPR applies, data necessary to prepare a quote you requested is processed to take the pre-contractual steps you asked for. Other enquiries are handled on the legitimate interest in responding to someone contacting Arkenesis, limited to that purpose. Optional analytics will require consent before activation. Providing privacy information does not replace that consent or authorise other uses.
Protection and updates
Access to enquiries is limited to their handling by the team. The website and form use HTTPS addresses, and the code validates the requested data. These measures are not an absolute security guarantee. We will review this policy when purposes, services or the website’s operation change. The date identifies the version. Contact contact@arkenesis.com about work and info@arkenesis.com about privacy.
Legal and service-provider information
Privacy contact
To exercise your rights or request the controller’s address, email info@arkenesis.com.