Independent expertise.

Practical Guidance.

Real Confidence.

Privacy Notice

Last updated: April 2026

WHO WE ARE

Westcroft Consulting S.L. is a Data Protection, Information Security and Governance, Risk & Compliance consultancy registered in Spain. We are the data controller in respect of any personal data collected through this website.

You can contact us at:

Westcroft Consulting S.L.

Avenida Meridiana 350, 11-D

08027 Barcelona, Spain

Email: info@westcroftconsulting.com

Our lead supervisory authority is the Agencia Española de Protección de Datos (AEPD): www.aepd.es

WHAT DATA WE COLLECT AND WHY

We collect personal data in the following circumstances:

When you complete our contact form, we collect your name, email address, organisation name (if provided) and the content of your message. We use this information to respond to your enquiry. Our lawful basis is legitimate interests - specifically, responding to a request you have made to us.

When you visit our website, we may collect standard technical data such as your IP address, browser type and pages visited. We use this to understand how our website is used and to maintain its security. Our lawful basis is legitimate interests.

We do not use your personal data for marketing purposes without your explicit consent, and we do not sell or share your data with third parties for their own commercial purposes.

HOW LONG WE KEEP YOUR DATA

We retain contact form enquiries for up to two years from the date of your initial contact, unless we enter into a client relationship with you, in which case separate retention terms will apply and will be communicated to you at that time.

Technical website data is retained for no longer than 12 months.

WHO WE SHARE YOUR DATA WITH

We do not sell your personal data. We may share it with trusted third-party service providers who support the operation of this website and our business - for example, our website hosting provider and email platform. These providers act as data processors on our behalf and are contractually required to handle your data securely and only for the purposes we specify.

If required by law, we may disclose your personal data to a competent authority or regulatory body.

INTERNATIONAL TRANSFERS

Where any of our service providers process data outside the European Economic Area, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, such as Standard Contractual Clauses approved by the European Commission or relying on an adequacy decision.

COOKIES

This website uses cookies. A cookie is a small file placed on your device when you visit a website. We use only essential cookies necessary for the website to function, and, where applicable, analytics cookies to help us understand how visitors use the site.

Where we use non-essential cookies, we will ask for your consent before placing them. You can withdraw your consent or manage your cookie preferences at any time via the cookie settings on this website. You can also manage cookies through your browser settings.

YOUR RIGHTS

Under the GDPR, you have the following rights in relation to your personal data:

The right to be informed about how we use your data
The right to access the personal data we hold about you
The right to have inaccurate data corrected
The right to have your data erased in certain circumstances
The right to restrict how we process your data
The right to data portability
The right to object to processing based on legitimate interests
The right not to be subject to solely automated decision-making

To exercise any of these rights, please contact us at info@westcroftconsulting.com. We will respond within one month of receiving your request. We may ask you to verify your identity before processing your request.

If you are not satisfied with how we have handled your data or responded to your request, you have the right to lodge a complaint with the AEPD at www.aepd.es.

CHANGES TO THIS POLICY

We may update this privacy policy from time to time. The date at the top of this page will always reflect when it was last revised. We encourage you to review it periodically.