Legal & Compliance

1. Data Controller

The data controller for all personal data processed through this website is:

2. Types of Personal Data Collected

We collect the following categories of personal data through our website and services:

• Identity Data: Full name, surname, and professional role or title.
• Contact Data: Email address, phone number, and physical postal address.
• Technical Data: Internet Protocol (IP) address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage Data: Pages visited, session duration, click patterns, scroll depth, referral sources, and navigation pathways.
• Communication Data: Content of messages submitted through our contact forms, including project requirements and inquiry details.

3. Purposes and Legal Basis for Processing

We process your personal data exclusively for the following purposes, each grounded in a specific legal basis under the General Data Protection Regulation (EU) 2016/679:

• Responding to inquiries and providing quotes: Based on your explicit consent (Art. 6(1)(a) GDPR) and pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
• Service delivery and project execution: Based on the performance of a contract to which you are a party (Art. 6(1)(b) GDPR).
• Legal compliance and regulatory obligations: Based on compliance with legal obligations to which we are subject (Art. 6(1)(c) GDPR), including tax record retention and anti-fraud measures.
• Service improvement and analytics: Based on our legitimate interest in understanding how our website is used and improving our service offerings (Art. 6(1)(f) GDPR).

4. Data Retention Periods

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:

• Contact form submissions and inquiry data: Retained for 24 months from the date of submission, or until the business relationship concludes, whichever is later.
• Contractual and project data: Retained for the duration of the contractual relationship plus 5 years, in compliance with Spanish commercial and tax law.
• Technical and usage data: Retained for 12 months from the date of collection.
• Cookie consent records: Retained for the duration of the consent period plus 6 months for audit purposes.

5. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of Access (Art. 15): You may request confirmation of whether we process your personal data and obtain a copy of such data.
• Right to Rectification (Art. 16): You may request the correction of inaccurate personal data or the completion of incomplete data.
• Right to Erasure (Art. 17): You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
• Right to Restriction of Processing (Art. 18): You may request the restriction of processing under certain circumstances, such as when you contest the accuracy of the data.
• Right to Data Portability (Art. 20): You may request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21): You may object to the processing of your personal data based on legitimate interests, including profiling.
• Right to Withdraw Consent (Art. 7(3)): You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Espanola de Proteccion de Datos, AEPD) at www.aepd.es.

6. Data Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS 1.3 protocols.
• Role-based access controls and multi-factor authentication for internal systems.
• Regular security assessments and vulnerability scanning.
• Staff training on data protection and information security practices.
• Incident response procedures and breach notification protocols.

7. International Data Transfers

Where we transfer personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR. These safeguards may include Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or binding corporate rules.

1. What Are Cookies

Cookies are small text files placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites function efficiently, to provide reporting information, and to enhance the user experience. Cookies do not contain executable code and cannot be used to deliver malware.

2. Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the website to function properly. They enable core features such as page navigation, access to secure areas, and session management. The website cannot function correctly without these cookies. They do not require consent under EU law.
• Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your preferences, language settings, and consent choices. If you do not allow these cookies, some features may not function as intended.
• Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. This data helps us improve our website structure, content, and performance.

3. Cookie Consent Management

Upon your first visit, our website displays a cookie consent banner that allows you to accept or decline non-essential cookies. Your choice is stored in your browser's local storage and can be modified at any time by clearing your browser data or revisiting the consent prompt.

You may also configure your browser settings to block or delete cookies. Please note that blocking strictly necessary cookies may impair website functionality. For browser-specific instructions, consult your browser's help documentation.

4. Third-Party Cookies

We do not use third-party advertising cookies or tracking pixels. Any analytics tools employed on this website are configured to respect user privacy, anonymize IP addresses, and comply fully with GDPR requirements. We do not sell, share, or transfer cookie data to third parties for marketing or advertising purposes.

5. Legal Basis

The use of strictly necessary cookies is based on our legitimate interest in ensuring the proper functioning of our website (Art. 6(1)(f) GDPR). The use of functional and analytics cookies is based on your explicit consent (Art. 6(1)(a) GDPR), obtained through our cookie consent banner in accordance with Article 5(3) of the ePrivacy Directive (2002/58/EC).

1. Scope of Application

This Refund Policy governs all services purchased directly from SlateHarborForge through our website, direct engagement, or formal service agreements. By commissioning our services, you acknowledge and agree to the terms outlined below.

2. Eligibility Conditions

Refunds may be considered under the following circumstances:

• Service Not Initiated: A full refund will be issued if cancellation occurs before Phase 1 (Discovery & Structural Mapping) work has commenced. Cancellation must be submitted in writing to [email protected].
• Partial Completion: If a project is cancelled after work has begun, a pro-rated refund will be calculated based on the percentage of work completed, minus administrative and resource allocation fees. The completed work percentage is determined by the project milestone tracker.
• Material Breach: A full or partial refund may be issued if SlateHarborForge demonstrably fails to deliver agreed-upon deliverables as specified in the signed project agreement, after a reasonable cure period of 14 business days.

3. Refund Request Process

To request a refund, submit a written request to [email protected] including:

• Your project reference number or invoice identifier.
• A detailed explanation of the reason for the refund request.
• Supporting documentation, if applicable.

We will acknowledge receipt of your request within 3 business days and provide a formal determination within 10 business days. Approved refunds will be processed to the original payment method within 14 business days of approval.

4. Exceptions and Non-Refundable Items

Refunds are not available for:

• Completed and delivered work that meets the specifications outlined in the signed project agreement.
• Delays caused by client-side dependencies, including but not limited to delayed approvals, incomplete content provision, or third-party access restrictions.
• Force majeure events beyond our reasonable control, including natural disasters, government actions, or infrastructure failures.
• Change of mind or business direction after project work has commenced.
• Services purchased at discounted or promotional rates, unless otherwise specified in the service agreement.

1. Acceptance of Terms

By accessing the website at SlateHarborForge or engaging our professional services, you agree to be bound by these Terms of Service, our Privacy Policy, and all applicable laws and regulations. If you do not agree with any of these terms, you are prohibited from using or accessing this site and our services.

2. Service Description

SlateHarborForge provides professional web development, digital architecture, system engineering, and related technical services. All service specifications, deliverables, timelines, and pricing are defined in individual project agreements or statements of work signed by both parties. The descriptions on this website are indicative and do not constitute binding contractual commitments.

3. Payment Terms

Payment terms are specified in individual project agreements or invoices. Unless otherwise stated in writing:

• Invoices are due within 14 calendar days of issuance.
• Payments are to be made in Euros (EUR) via bank transfer or approved digital payment methods.
• Late payments may incur interest charges at the rate of 1.5% per month on the outstanding balance, or the maximum rate permitted by applicable law, whichever is lower.
• SlateHarborForge reserves the right to suspend work on any project where payment is overdue by more than 21 calendar days.

4. Intellectual Property

Upon full and final payment for the applicable project, all intellectual property rights for custom-developed work products are transferred to the client. This includes source code, design assets, documentation, and other deliverables specifically created for the commissioned project.

The following remain the exclusive property of SlateHarborForge:

• Pre-existing tools, frameworks, libraries, and methodologies used in the delivery of services.
• General knowledge, techniques, and know-how acquired during project execution.
• Templates, boilerplate code, and reusable components developed independently of any specific client engagement.

5. Limitation of Liability

To the maximum extent permitted by applicable law, SlateHarborForge shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, business opportunities, or goodwill, arising out of or in connection with the use of our website or services.

Our total aggregate liability for any claims arising out of or related to these Terms or our services shall not exceed the total fees actually paid by you to SlateHarborForge for the specific service giving rise to the claim during the twelve (12) month period preceding the event giving rise to the liability.

6. Confidentiality

Both parties agree to maintain the confidentiality of all proprietary and confidential information disclosed during the course of the engagement. This obligation survives the termination of the business relationship for a period of 3 years. Confidential information does not include information that is publicly available, independently developed, or rightfully received from a third party without restriction.

7. Governing Law and Dispute Resolution

These Terms of Service are governed by and construed in accordance with the laws of the Kingdom of Spain. Any disputes arising from or relating to these Terms or our services shall be resolved through the following process:

• Negotiation: The parties shall first attempt to resolve any dispute through good-faith negotiation for a period of 30 days.
• Mediation: If negotiation fails, the parties shall submit the dispute to mediation administered by a mutually agreed mediator in Bilbao, Spain.
• Litigation: If mediation fails, the dispute shall be submitted to the exclusive jurisdiction of the courts of Bizkaia, Spain.

8. Modifications to Terms

SlateHarborForge reserves the right to modify these Terms of Service at any time. Changes will be posted on this page with an updated revision date. Material changes will be communicated to active clients via email at least 14 days before taking effect. Continued use of our website or services after the effective date of any modifications constitutes acceptance of the revised Terms.

9. Severability

If any provision of these Terms is found to be unenforceable or invalid under applicable law, such unenforceability or invalidity shall not render these Terms entirely unenforceable. The remaining provisions shall continue in full force and effect, and the invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving its original intent.