Privacy policy
Last updated: August 19, 2026
1. Data controller
Zhiyi Yan NIE: Y9323374Q Address: Calle Petra 24, 30002 Murcia, Spain Email: info@sclt.es
2. Data we collect
When you use sclt.es services, we may collect the following personal data: • Email address: for sending TIE service notifications, account verification, and service-related communications. • Immigration data (office and lote number): for providing the TIE tracking service. • Preferred language: to personalize communications. • Payment data: processed directly by Stripe. SCLT does not store or have access to your bank card details. We only store the Stripe transaction identifier for billing and support purposes. • IP address: temporarily, for abuse protection (rate limiting). Not stored persistently.
3. Purpose of processing
Your personal data is processed exclusively for: • Providing the contracted TIE notification service. • Sending transactional communications related to the service (confirmations, reports, alerts, reminders). • Payment management and billing. • Compliance with legal obligations. With your consent, we may display advertising managed by Google AdSense. If you accept advertising cookies, Google may personalise ads based on your browsing. You can manage your ad preferences at adssettings.google.com. Your data is NOT used for: • Commercial profiling by SCLT. • Sale, transfer, or rental of personal data to third parties.
4. Legal basis
Processing of your data is based on: • Contract performance: for providing the contracted notification service (Art. 6.1.b GDPR). • Consent: for the free plan and sending notifications (Art. 6.1.a GDPR). You may withdraw consent at any time via the unsubscribe link in each email. • Legitimate interest: for abuse and fraud prevention (Art. 6.1.f GDPR). • Legal obligation: for compliance with tax and legal obligations (Art. 6.1.c GDPR).
5. Data recipients
Your personal data is shared exclusively with the following technical providers necessary for service delivery: • Stripe, Inc. (San Francisco, USA): payment processing. Stripe acts as an independent data controller for payment data. More info: stripe.com/privacy. • Amazon Web Services (AWS SES): transactional email delivery. AWS acts as a data processor for this technical service. • Cloudflare, Inc. (USA): web hosting, CDN, and DDoS protection. Cloudflare acts as a data processor. • Google Ireland Ltd (Dublin, Ireland): contextual and personalised advertising management via Google AdSense, subject to user consent. Google acts as an independent data controller for advertising data. More info: policies.google.com/privacy. When these providers process data outside the EEA, appropriate transfer mechanisms apply, such as the Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission. We do not sell, transfer, or rent personal data to third parties.
6. Data retention
• During the service period: all data necessary for service delivery. • Up to 6 months after termination: for support, incident management, and billing. • Tax data: retained for the legally required period (4 years under Spanish tax law). • After deletion request: effective deletion within 30 days, unless legal retention is required.
7. Your rights
Under the GDPR, you have the right to: • Access: request a copy of your personal data. • Rectification: correct inaccurate or incomplete data. • Erasure: request deletion of your data. • Portability: receive your data in a structured, commonly used format. • Objection: object to processing of your data. • Restriction: request restriction of processing. To exercise any of these rights, contact info@sclt.es with your registered email and the right you wish to exercise. We will respond within 30 days. If you believe your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
8. Security
SCLT implements reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Payment data is processed entirely by Stripe and never transits or is stored on SCLT servers.
9. Cookies
For information about cookie usage, see our Cookie Policy at sclt.es/legal/cookies/.
10. Changes
SCLT may update this privacy policy. The last update date is indicated at the top of this document. Material changes will be communicated to registered users by email.