Privacy Policy
Last updated: April 14, 2026
Blueprint Spain Relocation S.L. ("we," "us," or "our") is committed to protecting the privacy and personal data of our clients and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and applicable Spanish data protection legislation (Ley Orgánica 3/2018, de Protección de Datos Personales y garantía de los derechos digitales, LOPDGDD).
1. Data Controller
The data controller responsible for the processing of your personal data is:
2. What Personal Data We Collect
We collect personal data only when necessary to provide our immigration, relocation, tax advisory, and translation services. The types of data we may collect include:
Information you provide directly:
- Full name, email address, and phone number (via our contact and intake forms)
- Immigration-related documents (passports, visas, residency permits, birth certificates, marriage certificates)
- Financial and tax documents relevant to your immigration or tax residency assessment
- FBI background checks, apostilled documents, and sworn translations
- Employment or business documentation for visa applications
- Any other documents or information you voluntarily submit to us for the purpose of your immigration, relocation, or tax case
Information collected automatically:
- IP address and general location data
- Browser type, device information, and operating system
- Pages visited and time spent on our website (via Google Analytics)
- Cookies and similar tracking technologies (see Section 8)
3. Purpose and Legal Basis for Processing
We process your personal data for the following purposes, each with a lawful basis under GDPR Article 6:
- To provide our services: We collect and process personal documents and information to assess your immigration options, prepare visa applications, handle tax residency matters, and provide translation services. (Legal basis: performance of a contract, Art. 6(1)(b))
- To respond to enquiries: When you contact us through our website forms, we use your contact details to respond to your request. (Legal basis: legitimate interest, Art. 6(1)(f))
- To send confirmation emails: After you submit a form, we send an automated confirmation to acknowledge receipt. (Legal basis: legitimate interest, Art. 6(1)(f))
- To improve our website: We use anonymised analytics data to understand how visitors use our site and improve the user experience. (Legal basis: legitimate interest, Art. 6(1)(f))
- To comply with legal obligations: We may need to retain certain data to comply with Spanish or EU legal requirements. (Legal basis: legal obligation, Art. 6(1)(c))
4. Special Categories of Personal Data
In the course of providing immigration and relocation services, we may process sensitive personal data, including but not limited to nationality, criminal background check results, and health insurance information. We process such data only when:
- You have given explicit consent (Art. 9(2)(a) GDPR)
- It is necessary for reasons of substantial public interest or legal claims (Art. 9(2)(f) or (g) GDPR)
We will always inform you before processing any sensitive data and obtain your explicit consent where required.
5. How We Store and Protect Your Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or destruction. These measures include:
- Encrypted transmission of data via our website (SSL/TLS)
- Secure storage of documents and personal information
- Access restricted to authorised personnel only
- Regular review of our data protection practices
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:
- Client case files: Retained for the duration of our engagement plus a period of up to 5 years afterwards, in accordance with applicable legal and professional obligations.
- Contact form enquiries: Retained for up to 12 months from the date of your last communication with us, unless a client relationship is established.
- Analytics data: Anonymised and retained in accordance with Google Analytics' data retention settings.
You may request earlier deletion of your data at any time (see Section 9).
7. Data Sharing and Third Parties
We do not sell your personal data. We may share your data with the following categories of third parties only when necessary to provide our services:
- Spanish government authorities: As required for visa, residency, and tax-related filings on your behalf
- Email service provider (Resend): To send transactional emails such as form confirmations
- Google Analytics: For anonymised website usage analysis
- Professional partners: Such as sworn translators, legal advisors, or notaries, when required for your case
All third-party providers are bound by data processing agreements and are required to comply with GDPR.
8. Cookies
Our website uses cookies to enhance your browsing experience and for analytics purposes. We use:
- Essential cookies: Required for the website to function (e.g., cookie consent preferences)
- Analytics cookies: Google Analytics cookies to understand website traffic and usage patterns. These are only loaded after you consent.
You can manage your cookie preferences at any time through your browser settings. You may also withdraw your cookie consent by clearing your browser cookies and revisiting the site.
9. Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15): You may request a copy of the personal data we hold about you.
- Right to rectification (Art. 16): You may request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17): You may request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
- Right to restriction of processing (Art. 18): You may request that we limit how we process your data in certain circumstances.
- Right to data portability (Art. 20): You may request your data in a structured, commonly used, machine-readable format.
- Right to object (Art. 21): You may object to processing based on legitimate interests, including direct marketing.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us at info@blueprint-spain.com. We will respond within 30 days of receiving your request.
10. International Data Transfers
Your data may be transferred to or processed in countries outside the European Economic Area (EEA) where our service providers operate (e.g., email infrastructure). In such cases, we ensure appropriate safeguards are in place, including:
- EU Standard Contractual Clauses (SCCs)
- Adequacy decisions by the European Commission
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: