How ARC Design collects and uses personal data, under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Data controller: John-Kyle Oberholzer, trading as ARC Design. NIF/NIE: Z1260978P. Address: Camino de los Ríos 88, 29650 Mijas, Málaga, Spain. Email: info@arc-design.es.
When you use our enquiry form or email us, we collect the details you choose to give us: name, email address, phone number, property location, project type, approximate budget and a description of your project.
We use your data to reply to your enquiry and, if you wish, to prepare a proposal (steps taken at your request before entering into a contract, Art. 6.1.b GDPR). If you become a client, we process your data to deliver the contract and meet our legal, tax and accounting obligations (Art. 6.1.b and 6.1.c GDPR). We do not send marketing without your consent.
Enquiries that do not lead to a project are deleted after 12 months. Client data is kept for as long as required by Spanish tax and commercial law.
We do not sell your data. We use trusted service providers to run our business, who process data on our behalf: Webflow, Inc. (website hosting and form handling), monday.com (client management), Google (website analytics and, with your consent, advertising; see our Cookie Policy), and our email and accounting providers. Some of these providers are based outside the European Economic Area; where that is the case, transfers are covered by the EU-US Data Privacy Framework or Standard Contractual Clauses.
You can ask to access, correct or delete your data, object to or restrict its processing, and ask for a copy in a portable format, by emailing info@arc-design.es. You also have the right to complain to the Spanish Data Protection Agency (AEPD), www.aepd.es.
We may update this policy from time to time. The latest version will always be published on this page. Last updated: 1 November 2026.