← Back to home

Legal

Last updated: 2026-11-13

Privacy policy

This policy explains what personal data I process through this site, why, and what rights you have, in line with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018.

Data controller

  • Álvaro Fabre (Tom Fabre) · NIE: Z1121752-R
  • Address: Calle Cava de San Miguel 13, 28005 Madrid, España
  • Contact: hey@tomfabre.com

What data I process, why and on what legal basis

  • Contact form: name, email, topic, message and, if you choose, an approximate budget. Purpose: to answer your enquiry and, if you ask for it, prepare a proposal. Legal basis: your consent when you submit the form (Art. 6.1.a GDPR) and, when you ask for a proposal, steps taken at your request before entering a contract (Art. 6.1.b).
  • Direct email to hey@tomfabre.com: the data you include in your message, for the same purpose and on the same legal basis.
  • Web analytics (Google Analytics 4): aggregated data about how the site is used, only if you accept analytics cookies. Legal basis: your consent (Art. 6.1.a GDPR).
  • Technical logs: the hosting service may log your IP address for security and operation. Legal basis: legitimate interest (Art. 6.1.f).

The form includes a simple anti-spam check; it is not used to build profiles. I don't make automated decisions about you and I don't sell your data.

Who else has access

To provide the service I use providers acting as data processors: Formspree, Inc. (receiving form messages), Cloudflare, Inc. (DNS and email forwarding), Google LLC (email and, if you accept, Google Analytics) and GitHub, Inc. (site hosting). I don't share your data with third parties unless required by law.

International transfers

Some of these providers are based in the United States. Transfers rely on the safeguards provided for in the GDPR, such as the adequacy decision for the EU-US Data Privacy Framework or standard contractual clauses, depending on the provider.

How long I keep data

  • Messages and enquiries: up to 12 months after the last contact. If a professional relationship starts, I keep them for as long as applicable legal obligations require.
  • Analytics data: 14 months at most.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to hey@tomfabre.com and saying which right you want to exercise. You can withdraw your consent at any time (for example from “Cookies” in the footer). If you think your data is not being handled properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

Cookie policy

A cookie is a small file your browser stores when you visit a website. This site uses only the following:

NameOwnerPurposeDurationType
af-consenttomfabre.comRemembers your cookie choiceUntil you clear itTechnical
af-lang, af-theme, af-viewtomfabre.comRemember language, light/dark theme and project viewUntil you clear themTechnical
(assistant session)tomfabre.comKeeps the assistant conversation while the tab is openSessionTechnical
_gaGoogleTells users apart anonymously2 yearsAnalytics (only if you accept)
_ga_W3V7MB7SZ7GoogleKeeps session state2 yearsAnalytics (only if you accept)

Technical items are needed for the site to work or to remember your settings and don't require consent. Analytics ones only run if you press “Accept” in the cookie notice. I don't use advertising cookies.

You can change your choice at any time with the “Cookies” button in the footer, or clear cookies from your browser settings.

Google LLC may process this data as a processor; see Google's privacy policy for more information.