Privacy policy

This English version is provided for convenience. In the event of any discrepancy, the Spanish version prevails.

This policy explains how personal data received through this website is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

Data controller

Controller

THE EPICUREAN LM, S.L.

Tax ID (NIF)

B88963145

Contact

[email protected]

What data is collected

Contact may take place by email, by telephone or through the site’s forms, always at the user’s initiative. In every case, the data the user provides is processed: name, email address, brand or company and the content of their message.

The site includes two forms:

• The diagnostic test, which records the layers the user ticks together with their email and, if given, the name of their brand.
• The contact form, which collects name, email, brand and message.

Both require explicit consent before submission. Submissions are stored in a Cloudflare D1 database hosted in the Western Europe region. No IP address is recorded; only the country Cloudflare infers at the time of submission, the page it was sent from and, where present, the referring site.

Audience measurement

Cloudflare Web Analytics provides an aggregate picture of how the site is used: page views, referring site, country, device type and browser, and load times. The tool does not set cookies, does not use browser storage and does not track visitors individually.

Legal basis

Legitimate interest in understanding how the site is used and improving it (Art. 6(1)(f) GDPR).

Purpose and legal basis

Purpose

To respond to the enquiry received and, where applicable, to assess and prepare a proposal for services.

Legal basis

Taking pre-contractual steps at the request of the data subject (Art. 6(1)(b) GDPR) and legitimate interest in responding to the communications received (Art. 6(1)(f) GDPR).

Retention

For the duration of the relationship and, thereafter, for the applicable statutory limitation periods.

Recipients

No data is disclosed to third parties, except where required by law. The technology providers that support the email service, web hosting and audience measurement act as data processors, under contracts that comply with Article 28 GDPR.

Email

Google, through Google Workspace.

Hosting and measurement

Cloudflare, Inc., through Cloudflare Pages and Cloudflare Web Analytics.

International transfers

Both providers may process data in the United States. These transfers are covered by the EU-US Data Privacy Framework, under which Google LLC and Cloudflare, Inc. are certified, and by the standard contractual clauses approved by the European Commission.

Rights

You may request access to, rectification, erasure, restriction and portability of your data, and object to its processing, by writing to [email protected]. If you consider that the processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).

Last updated: 21 October 2026