Privacy Policy

Last updated: 30 August 2026.

This Privacy Policy explains how 4Onl, operator of Web Agency On, handles personal data when you visit webagencyon.com, submit an enquiry or become a client or agency partner.

1. Data controller

4Onl

Business / registered address: Rúa Rafael Alberti, 8, 15008 A Coruña, España

Tax identification number: 1765084X

Email: [email protected]

2. Information we collect

We may process information you provide directly, including:

• your name and business email address;
• company or agency name;
• current website;
• project type and expected timeframe;
• project goals, requirements and other information included in your brief;
• communications exchanged during evaluation and delivery of a project.

Our systems may also generate limited technical information necessary for security and operation, such as request logs, timestamps, IP-related security records and session information.

When a project is paid through PayPal, PayPal processes the payment credentials. We do not receive or store your PayPal password or full payment-card credentials.

3. Why we use personal data

We use personal data to:

• review and respond to project or partnership enquiries;
• take steps requested by you before entering into a contract;
• prepare, manage and deliver accepted projects;
• communicate about scope, revisions, payments and deployment;
• maintain records required for accounting, tax or legal purposes;
• protect the website, forms and infrastructure against abuse, fraud and security incidents;
• establish, exercise or defend legal claims where necessary.

We do not use enquiry data for unrelated mass marketing unless a separate lawful basis and any required consent are established first.

4. Legal bases

Depending on the situation, processing is based on:

• steps taken at your request before entering into a contract;
• performance of a contract;
• compliance with legal obligations;
• legitimate interests in operating a secure business website, preventing abuse, maintaining records and handling ordinary B2B communications.

Where consent is legally required for a particular future feature, we will request it separately.

5. Service providers and recipients

We may use service providers that support the operation of Web Agency On, including:

• hosting and infrastructure providers;
• DNS, security and email-routing providers, including Cloudflare;
• mailbox and email-delivery providers;
• PayPal as payment provider when a project is accepted;
• professional advisers where reasonably necessary for legal, tax or accounting matters.

These providers process data only to the extent required for their services and under their own applicable terms and data-protection commitments.

6. International processing

Some technology or payment providers may process data outside the European Economic Area.

Where this occurs, we rely on the transfer mechanisms, safeguards or adequacy arrangements required by applicable data-protection law.

7. How long we keep information

Unsuccessful or inactive project enquiries are normally deleted or anonymised within 12 months, unless there is a legitimate reason to retain them for longer.

Accepted project records, invoices, payment references and contractual communications may be retained for the periods required by applicable accounting, tax, commercial or limitation rules.

Security logs are retained only for a proportionate period necessary for operational and security purposes.

8. Your rights

Subject to applicable law, you may have rights to request access, rectification, erasure, restriction, portability or objection to certain processing.

To exercise a privacy right, contact:

[email protected]

We may need to verify your identity before acting on a request.

If you believe your data-protection rights have been infringed, you may also lodge a complaint with the competent supervisory authority. For a controller established in Spain, this may include the Agencia Española de Protección de Datos (AEPD).

9. Security

We use reasonable technical and organisational measures appropriate to the nature of the information processed.

No internet service can guarantee absolute security, and this policy should not be interpreted as such a guarantee.

10. Changes to this policy

We may update this Privacy Policy when our services, providers or legal obligations change.

The current version will always be published on this page.