1Who we are
This policy applies to the website trapeziconsulting.com (English and Spanish versions), operated by Trapezi (). Trapezi is the controller of the personal data processed through this website, under the EU General Data Protection Regulation (GDPR), the UK GDPR where applicable, and the other data protection laws that apply.
2Data we collect
We only collect what you send us, plus a few technical records needed for security:
- Contact: name, job title, company, country, tax ID (optional), work email and phone number (optional).
- Project: descriptions of the parts, manufacturing and assembly information, and the files you attach (STEP models, PDF drawings, supplier quotes, reference photos).
- NDA acceptance: name and job title of the signatory, company, date and time, IP address and browser, to evidence the electronic acceptance.
- Security: the IP address of each submission, used to limit abuse and automated submissions.
We do not ask for special categories of data, and this website is not intended for anyone under 18.
3Purposes and legal bases
We do not use your data for third-party advertising, we do not sell or share it for cross-context behavioral advertising, and we make no automated decisions about you.
4Who we share data with
Only with the providers needed for the website and communication to work:
- Website hosting, where the form is processed.
- Email provider, which receives the requests and attachments.
- Google Fonts, which serves the website fonts and receives your IP address when the page loads.
- Authorities, when required by law or court order.
5International transfers
Trapezi and its providers may process and store your data in countries outside your own. Where the GDPR applies, transfers outside the European Economic Area rely on the safeguards available under Chapter V of the GDPR, such as an adequacy decision or standard contractual clauses, or on the transfer being necessary to take the steps you requested before a contract (Art. 49(1)(b)).
6How long we keep data
- Requests that did not become projects: up to 12 months, so we can pick up the conversation if you come back. Then we delete them.
- Contracted projects: for the duration of the contract and the legal periods for tax records and the defense of rights.
- NDA acceptance record: for as long as the confidentiality obligations of the agreement last.
- Technical files: returned or deleted on request, except where the law or the contract requires us to keep them.
7How we protect data
Encrypted connection (HTTPS), access to files restricted to the co-founders working on the project, a limit on submissions per IP address and confidentiality under the NDA. If a security incident creates a relevant risk to you, we will notify you and the competent authorities as required by law.
8Your rights
Depending on the law that applies to you, you can at any time:
- Access your data
- Correct inaccurate or incomplete data
- Have your data erased
- Restrict processing
- Receive your data in a portable format
- Object to processing based on legitimate interests
- Withdraw consent, where it applies
- Complain to your data protection authority
We reply within 30 days, through the same channel you used.
9Cookies and browser storage
This website does not use tracking, advertising or analytics cookies. The quote form keeps a draft in your own browser (local storage) so you do not lose what you filled in, and the site remembers your currency choice (USD or EUR). This information is not sent to anyone, does not include your files and the draft is deleted when the request is sent. You can also clear it by deleting this site's data in your browser.
10Contact and changes
To exercise your rights or ask about this policy, contact us at:
We may update this policy to reflect changes to the website or the law. The date at the top shows the version in force. See also the Terms of Use and the Non-Disclosure Agreement.