Privacy policy
Last updated: 3 September 2026
Controller
The data controller is Gerard Dalmau. Questions about the processing of personal data may be sent to gerard@theluxurybutler.com.
Data processed
When you contact The Luxury Butler by email, telephone, WhatsApp or through a form, we may process your name, contact details, the service or project you are interested in and any information you choose to include in your message. The language of the enquiry is also recorded so that it can be handled appropriately.
Purposes and legal basis
Data is used to respond to your enquiry, assess availability, prepare a proposal and, where appropriate, manage the professional relationship. The legal basis for responding to enquiries and taking steps at your request before a possible contractual relationship is Article 6(1)(b) GDPR. Where another purpose requires a different legal basis, the applicable basis will be stated.
Retention
Data is kept for as long as necessary to handle the enquiry and, where appropriate, manage the professional relationship. It may then be retained for the periods required by law or necessary to establish, exercise or defend legal claims.
Recipients
Personal data is not sold or shared for commercial purposes. It may be accessed by technical providers required for email, hosting or site operation, and by public authorities where disclosure is legally required.
Analytics
This website uses Plausible Analytics to understand general website usage. In the configuration used here, it does not use tracking cookies or create personal profiles. Statistical information is used in aggregate to understand how the site performs.
Your rights
You may request access, rectification, erasure, restriction, objection or data portability where applicable by writing to gerard@theluxurybutler.com. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).
Security and confidentiality
Enquiries are handled personally and discreetly. Reasonable technical and organisational measures are applied to protect information from unauthorised access, loss, alteration or improper disclosure.
International transfers
The intention is to process data within the European Economic Area. Where a technical provider is located outside the EEA, a transfer will only take place where a lawful basis and the safeguards required by applicable law are in place.
Automated decisions
No solely automated decisions are made and no profiling is carried out using information submitted through contact forms. Enquiries are reviewed by a person.
Minors
The site is not specifically directed at children. Personal data relating to minors is not knowingly collected where it is not necessary for the requested service. If improper collection is identified, appropriate steps will be taken to delete it where required.