Privacy
Your data is like a four-leaf clover. Rare, secure, and yours.
①Who We Are.
The controller of the personal data described in this policy is Yana Litovinskaya, a sole trader (autónoma) registered in Spain, trading as CommonPeople ("we", "our", or "us"). Contact: hi@withcommonpeople.com.
Services are provided by Yana Litovinskaya, autónoma · NIE/NIF Z0682080C · Carrer de Bac de Roda 170, 08020 Barcelona, Spain.
②What We Collect.
When you book a call, email us or work with us, we collect your name, company, email address and anything else you choose to share. If you pay by card, Stripe processes the payment; we never see or store card details.
When you visit this website, our hosting provider records technical data such as your IP address, browser and the pages you request.
③Why We Use It.
To reply to you and arrange calls — to take the steps you ask for before a contract, or our legitimate interest in answering business enquiries. To deliver the work and manage our agreement, including invoicing — to perform the contract. To keep accounting and tax records — a legal obligation. To keep this website secure and working — our legitimate interest.
We do not use your data for advertising, and we do not sell it.
④Who Processes It for Us.
We share personal data only with providers that help us run the studio, and only what they need: call booking (currently Cal.com), hosting, security and server logs (Cloudflare), email, project management (for example Linear or Jira) and, when you pay by card, card payments (Stripe).
Within the team, we share project materials only with the people working on your project. We may show work we delivered on our website and social channels; if you want your project kept private, tell us before we start.
⑤Transfers Outside the EU.
Some of these providers are based in, or use servers in, the United States. Where a provider is certified under the EU-US Data Privacy Framework, we rely on that; otherwise we rely on the European Commission’s Standard Contractual Clauses.
⑥How Long We Keep It.
Enquiries that do not lead to a project: up to 12 months. Project and contract data: for the project, and up to 5 years after it ends in case of legal claims. Invoices and accounting records: as long as Spanish tax and commercial law requires, currently up to 6 years. Server logs: a short period, as set by our hosting provider.
⑦Data Security.
We take reasonable measures to protect your information and use established providers that encrypt data in transit.
⑧Your Rights.
You can ask us to access, correct or delete your personal information, to restrict or object to how we use it, or to receive it in a portable format, by emailing hi@withcommonpeople.com. We reply within one month.
If you think we have not handled your data properly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).
⑩Changes to This Policy.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.
Contact Us.
If you have any questions about this Privacy Policy, please send a message to hi@withcommonpeople.com