Privacy Policy
1. Who is responsible for your data
The controller of personal data processed through this website and our activities is:
- Company: Javier Gomez Novoa, trading as GumGum Labs
- Tax ID (NIF/CIF): 72701450Z
- Address: Navarrería 27, 31200 Estella (Navarra)
- Email: gumgumlabs@gmail.com
2. What we collect through this website
This website is static. We do not run analytics, advertising or tracking tools on it, so simply visiting these pages does not create a profile of you. For details on the minimal storage we use (your cookie-consent preference), see our Cookie Policy.
The contact form on this site does not send or store anything by itself: it opens your own email application with the message pre-filled. When you email us, we receive your email address and whatever information you choose to include.
3. Why we process personal data
| Purpose | Data | Lawful basis (GDPR) |
|---|---|---|
| Answering your inquiries and requests | Email address, message content | Legitimate interests / steps prior to a contract |
| Providing contracted software services | Contact details of client representatives; project information | Performance of a contract |
| Processing purchases in our apps | Handled by payment providers; see section 4 | Performance of a contract |
| Complying with legal obligations | Billing and accounting records where applicable | Legal obligation |
4. Payments in our apps
Our products (Appothecary and Fastory) are close to launch. Where payments apply, they will be processed by external payment providers such as Stripe or the app stores themselves. Card numbers are never sent to us: they are collected and stored by the payment provider under its own privacy policy. We only receive what is necessary to deliver the purchase and keep accounting records (for example, a transaction reference).
5. Services we provide to other companies
When we develop software for clients, we may process personal data as part of the project. In those cases we act according to the agreement with the client, which allocates controller/processor roles and requires appropriate safeguards, including confidentiality and data-protection commitments.
6. Who we share data with
We do not sell personal data. We share it only with providers necessary to operate, such as hosting for this website and payment processing for future app purchases, and when legally required. If a provider processes data outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.
7. How long we keep it
Inquiry emails are kept while the conversation is active and then deleted within a reasonable period. Billing records are kept for the periods required by Spanish tax and commercial law. Data related to client projects is kept as agreed in each engagement and deleted afterwards.
8. Your rights
You can ask us at any time to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase data that is no longer needed ("right to be forgotten")
- Object to or restrict certain processing
- Receive your data in a portable format, where applicable
Write to gumgumlabs@gmail.com and we will respond within one month. If you believe we have mishandled your data, you can lodge a complaint with the Spanish supervisory authority, the AEPD (www.aepd.es).
9. Changes to this policy
If our practices change (for example, when our apps launch), we will update this page and revise the date above.
← Back to home