Privacy notice

Who is responsible

Buba Productions is a studio operating from Spain. Buba Productions is not an incorporated company. You can contact us at contact@bubaproductions.com about your personal information.

What we receive

When you send an enquiry, we receive your name, email address, project type and brief, together with any timing information or calculator plan you choose to include. Required fields let us understand your request and reply. Please avoid including sensitive personal information, patient information or confidential information about other people.

A project plan included in a contact link can appear in browser history and hosting request records. It is not emailed to us until you submit the form. There is no account or payment facility on this website.

Website requests also expose ordinary technical information, such as IP address, requested URL and browser information, to our hosting provider. The site remembers a motion preference only when you choose one. See Cookies & storage.

The site also remembers your chosen English or Spanish language. This preference contains no contact details and is not used for profiling.

Why we use it

We use enquiry information to respond, discuss a potential project and follow up on that conversation. Where you are asking about a contract with us personally, this is necessary to take steps at your request before entering a contract (GDPR Article 6(1)(b)). For other correspondence, including enquiries on behalf of a business, we rely on our legitimate interest in answering relevant requests and managing business communications (Article 6(1)(f)).

Necessary technical processing supports our legitimate interest in keeping the website available and secure. Submitting an enquiry does not sign you up to a mailing list. The site does not use advertising or behavioural analytics scripts.

Services that handle information

Cloudflare hosts and protects the website. FormSubmit receives form submissions and forwards them to our mailbox, hosted by Zoho. These services process information needed to deliver and protect their services. You can also email us directly, which avoids the website form’s FormSubmit submission path.

With JavaScript enabled, the form sends your details to FormSubmit only when you submit. Without JavaScript, submission takes you to FormSubmit’s own page, where its verification and privacy arrangements apply.

Provider information: Cloudflare privacy policy, FormSubmit privacy policy and Zoho privacy policy.

Provider processing can involve countries outside the European Economic Area. We have not yet verified FormSubmit’s processing locations and international-transfer safeguards, or completed our provider processing-agreement review. We cannot currently confirm those arrangements. Contact us before sharing sensitive or confidential material.

How long we keep enquiries

Our enquiry retention policy took effect on 16 September 2026. Unconverted enquiries become due for deletion six months after the last meaningful conversation. We review the mailbox quarterly and remove enquiries due for deletion at that review, so routine removal can take up to nine months after the last meaningful conversation. This policy also applies to older unconverted enquiries.

If an enquiry becomes a project, information needed for that project is retained for the relationship and any applicable contractual, accounting or legal obligations. A specific legal claim or obligation may also justify retaining particular records for longer; this is not a reason to keep every enquiry indefinitely.

FormSubmit documents a separate 30-day submission archive. Mailbox trash, archives, backups and provider records may follow separate retention rules; deleting a message from the inbox does not necessarily erase those copies immediately.

Your rights and requests

Email contact@bubaproductions.com to request access, correction or deletion, or to ask for restriction, to object to processing based on legitimate interests, or for portability where applicable. We may need proportionate information to confirm that a request concerns your data. You do not need to send an identity document with your first request.

We will respond within the time limits required by data-protection law, normally one month. If a permitted extension is needed, we will explain it. Erasure is not absolute: we will explain any legal reason for keeping particular records. Requests cover our relevant correspondence and the provider copies we can control, rather than only the inbox message.

You can complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority. You do not have to contact us first.