Privacy policy
Last updated: 26 August 2026
This policy explains which personal data this website collects, what it is used for and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).
1. Data controller
- Controller: Lucía Illescas Ward (ilwa Interiorismo)
- Tax ID (NIF): 50881521R
- Address: Aldea Villamartín de Riba, 46, 33529 Nava (Asturias), España
- Email: hola@ilwa.es
- Phone: +34 611 644 722
2. What data is collected and why
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, email, phone (optional) and your message | Answering your enquiry and, if you ask, preparing a service proposal | Your consent (Art. 6(1)(a) GDPR) and pre-contractual steps at your request (Art. 6(1)(b) GDPR) |
| Email or WhatsApp | Your contact details and the content you send | Handling the communication you initiate | Pre-contractual steps at your request (Art. 6(1)(b) GDPR) |
| Browsing (only if you accept cookies) | Site usage data: pages viewed, device, browser, approximate origin, cookie identifier | Site usage statistics with Google Analytics 4 | Your consent (Art. 6(1)(a) GDPR and Art. 22.2 LSSI-CE) |
Fields marked as required in the form are needed to reply to you. The phone number is optional. No automated decision-making or profiling is carried out with your data.
3. How long data is kept
- Enquiries: while your request is handled and for a maximum of 12 months from the last communication, unless it becomes a commission.
- Clients: for the duration of the contractual relationship and afterwards for the statutory retention periods (generally 4 years for tax purposes under the Spanish General Tax Law and 6 years for commercial purposes under the Spanish Commercial Code).
- Analytics: Google Analytics data is kept for 14 months in the tool; the related cookies as described in the Cookie policy.
4. Recipients and processors
Your data is not disclosed to third parties, except where required by law. Service providers act as data processors under Art. 28 GDPR agreements:
- SW Hosting & Communications Technologies, S.L. (Girona, Spain): website and email hosting. Servers located in the European Union.
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland): Google Analytics 4, only if you accept analytics cookies. Google may process data in the United States; that transfer is covered by Google LLC’s certification under the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023). Google Analytics 4 does not log or store IP addresses.
- WhatsApp Ireland Limited: only if you choose to contact us via WhatsApp; processing in that app is governed by its own privacy policy.
Messages received through the form are stored in the website’s management panel, password-protected with restricted access.
5. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent given, without affecting the lawfulness of prior processing. Simply write to hola@ilwa.es stating which right you wish to exercise; if there is doubt about your identity, you may be asked to verify it.
If you believe the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.
6. Minors
This site is not aimed at children under 14. If you are under that age, please do not submit your data through the form.
7. Security
Appropriate technical and organisational measures are applied to protect your data: encrypted connection (HTTPS), restricted access to the management panel, backups, and providers located in the European Union or offering recognised safeguards.
8. Changes to this policy
This policy may be updated to reflect legal or website changes. The current version is always the one published on this page, with its update date.