Privacy policy
Last updated: 2 November 2026
At Norte we handle your data carefully and only for what we need. This policy explains how, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD).
At a glance
| Controller | Tangerine Pictures S.L. (Norte) |
|---|---|
| Purpose | Replying to your enquiries, preparing quotes and delivering our services |
| Legal basis | Your consent, pre-contractual steps, contract and legal obligations |
| Recipients | We don't share data with third parties unless the law requires it. We use technology providers (Google and Cloudflare) |
| Your rights | Access, rectification, erasure, objection, restriction and portability, and the right to complain to the AEPD |
1. Data controller
- Owner: Tangerine Pictures S.L.
- Tax ID (NIF / CIF): B88181763
- Address: Calle de la Libertad 55, 28100 Alcobendas (Madrid), Spain
- Privacy contact: contacto@nortecreative.es
2. What we collect, why, and on what legal basis
Contact form
Data: your name, email, message and, if you choose, company, phone, the service you're interested in, an approximate budget, your timeframe and how you found us. We also keep the date and time you sent it, the language, the page you wrote from and the fact that you accepted this policy (and which version), so we can show you gave consent.
Why: to reply to your enquiry and, if you ask, prepare a quote. We don't use this data to send you advertising.
Legal basis: your consent (GDPR art. 6.1.a) and steps taken at your request before entering a contract (GDPR art. 6.1.b). Name, email and message are required: without them we can't reply.
Emails
If you write to us directly at contacto@nortecreative.es, we process your address and message to reply, on the same legal basis.
Clients
If we work together, we process the data needed to deliver the service, invoice and meet our tax and accounting obligations. Legal basis: performance of a contract (GDPR art. 6.1.b) and legal obligations (GDPR art. 6.1.c).
Technical browsing data
When you visit the site, the hosting provider processes technical data such as your IP address, browser and the pages requested, in order to serve the site and protect it from attacks. Legal basis: our legitimate interest in keeping the site secure (GDPR art. 6.1.f). We use no analytics, advertising or social media tools that track you.
We don't profile you or make automated decisions with your data, and we never sell it.
3. How long we keep your data
- Enquiries that don't become a project: up to 24 months after our last contact, then deleted.
- Client data: for the duration of our relationship and then for the periods required by law (for example, 6 years for accounting records under the Spanish Commercial Code and 4 years for tax purposes).
- Server logs: as long as the hosting provider keeps them for security, usually a few days.
4. Who we share your data with
We don't share your data with third parties unless the law requires it. To run the site we use providers that process data on our behalf (processors), under contracts that require them to protect it:
- Google (Google Workspace and Gmail, Google Sheets and Apps Script): our contact email, and receiving and managing form messages.
- Cloudflare: website hosting, content delivery and protection against attacks.
International transfers
Google and Cloudflare are US-based companies and may process data outside the European Economic Area. Both are certified under the EU–US Data Privacy Framework, recognised by the European Commission as an adequate safeguard, and also apply standard contractual clauses.
5. How we protect your data
The site runs over HTTPS only; form messages travel encrypted and are stored in a private spreadsheet that only the Norte team can access. We apply reasonable technical and organisational measures — restricted access, strong passwords and two-step verification on our accounts — to prevent loss, unauthorised access or misuse.
6. Your rights
At any time you can exercise your rights to:
- access your data;
- rectify it if it's inaccurate;
- erase it when it's no longer needed;
- restrict or object to processing;
- port the data you gave us;
- withdraw your consent, without affecting earlier processing.
Email contacto@nortecreative.es saying which right you want to exercise. If we can't verify it's you, we may ask you to prove your identity. We'll reply within one month.
If you believe we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).
7. Children
Our services are aimed at businesses and professionals. We don't knowingly process data from children under 14; if you're under 14, please don't send us your data without permission from a parent or guardian (LOPDGDD art. 7).
8. Social media
The site links to our Instagram profile. These are plain links: nothing from Instagram or Meta loads until you click one. When you do, you go to their site, where Meta's privacy policy applies.
9. Cookies
This site uses no analytics or advertising cookies. Full details are in the cookie policy.
10. Changes to this policy
If we change this policy we'll update the date and version (current version: 2026-11-02). If the change is significant and we have your email, we'll let you know.