Privacy Policy

Introduction

This policy covers Iglow Servicios Integrales S.L. websites and app, customers, enquiries, job applications and team information, in accordance with the GDPR and applicable Spanish data protection rules.

Data controller

Iglow Servicios Integrales S.L.

Tax ID (CIF)

B88929757

Registered office

Calle Cándido Mateos 16Block 2, stair 1, 1st floor C28035 Madrid, Spain

Email

info@iglow.es

Website

https://www.iglow.es

Web application

https://app.iglow.es

Data and sources

We receive information you provide in forms, the app, the assistant, chat, email or telephone. We also receive authentication data from your chosen provider and technical data needed for security and operation.

• Identity, contact details, language, account and access data. We do not receive your plain-text password when you use an identity provider.
• Service address, availability, requirements, messages and photos you attach; these may reveal details of a property interior.
• Bookings, quotations, changes, incidents, billing and limited payment data; full card details are processed by the payment provider.
• Connection data, security logs, cookie preferences and, if you consent, analytics data.

Purposes and legal bases

• Responding to enquiries and preparing quotes: pre-contractual steps you request.
• Creating and managing your account, bookings, services, messages, payments, changes and claims: performance of the contract.
• Invoicing and tax or commercial obligations: legal obligation.
• Security, fraud prevention and defence of claims: legitimate interest balanced against your rights.
• Non-essential analytics or marketing communications, only if enabled and the required consent is obtained.

Data required to process a request or contract are indicated in each form; without them we cannot process it. Optional fields such as photographs are distinguished from required fields.

Assistant and photographs

The public assistant on iglow.es uses the OpenAI API to analyse the text of your enquiry and, if you choose to add them and authorise their analysis, photographs of the space. Photos are resized on your device and kept only in the current conversation's memory, without storing them in your browser's local storage. We send requests with persistent response storage disabled; the provider may retain records under its own security and retention policies. Do not include identity documents, access codes, health information or images of other people. You can request assistance without photos. The assistant within app.iglow.es currently uses Anthropic for the functions enabled there. When you submit the “Request a service” form, we save your contact details, the details you review and the guidance summary in Iglow’s system so our administration team can handle your enquiry. Chat photographs are not attached. Submitting an enquiry does not confirm a booking or create a charge.

Automated responses are indicative. Quotes requiring assessment are reviewed by the team. For maintenance at a fixed price, the app may calculate the amount from the duration and rate shown before the customer decides to book.

Your Space uses OpenAI to prepare a care plan from text, photographs and audio you choose to submit, after authorisation on the screen. Audio is limited to one minute and transcribed; you can review the text before continuing. When you save your care profile, Iglow privately stores optimised versions of the photographs so you can review them in your account and our administration team can assess your request. Original photograph files and audio are not retained. When you choose to save and send from the website, we temporarily hold the description, plan, optimised photographs and selected service in encrypted form while you complete account access. Recovery expires after 24 hours. Once you sign in, the profile is linked to your account and sent to Iglow for review. The profile’s description, plan and photographs remain until you delete it or your account is erased under the applicable policy. If you request a proposal, the summary is linked to the service and becomes part of its operational history. You can book manually without AI. In administration, drafts are reviewed before instructions are shared with the assigned team. Requests to OpenAI use store:false; this does not remove security logs that the provider may retain under its terms.

Addresses and location

If you choose to use your current location, your browser will ask for permission. We send the coordinates for that request to Google Maps Platform to suggest an address. We also query Google when you use address search. The location request is used to suggest an address; we keep the address you review and choose to save to your account for future bookings. You can enter another address and delete saved addresses.

Recipients and providers

Only team members who need the data for their roles and providers needed for hosting, authentication, storage, the assistant, communications, payments and error monitoring have access. Providers observed in the platform include Vercel, Supabase, Anthropic, OpenAI for the public website assistant and assessment, Resend, Stripe and Sentry and Cloudflare Web Analytics if enabled; Google may be involved if you choose its sign-in or services. WhatsApp operates under its own terms when you choose that channel.

Data may also be disclosed to advisers and authorities where legally required or needed to defend a claim. We do not sell personal data.

Google Workspace also supports operational email, calendar and invoice archiving; Maps supports address searches. External professional advisers access only the information needed for their authorised functions. Each provider role and safeguard depends on the service used.

International transfers

Some technology providers may access data from outside the European Economic Area. Where an international transfer occurs, we require an applicable GDPR mechanism, such as an adequacy decision or standard contractual clauses and supplementary measures where appropriate. You can request information on the specific safeguards at info@iglow.es.

Job applications

If you apply to work with Iglow, we process the data you send to assess your application and contact you during recruitment. The legal basis is pre-contractual steps at your request. We keep the data during the process and for as long as needed to address potential claims; we will not retain your application for future vacancies without an additional valid basis. Please avoid including sensitive data that we have not requested.

If you separately authorise future vacancies, we keep your application for up to 12 months. You can withdraw that optional permission without affecting the current selection.

Retention periods

We keep enquiries and assessments while processing them and as needed for liabilities; account and booking data while the relationship is active and afterwards for applicable limitation periods; invoices and records for applicable tax and commercial periods. On deletion requests, we erase or anonymise data no longer needed and restrict data that must be retained for legal obligations or claims.

Your rights

You may exercise the following rights at any time:

• Access.
• Rectification.
• Erasure.
• Objection.
• Restriction of processing.
• Portability.
• Withdrawal of consent where applicable.

How to exercise your rights

You may request to exercise any of your rights by writing to:

Email

info@iglow.es

You may also lodge a complaint with the Spanish Data Protection Agency if you believe the processing of your data does not comply with applicable regulations.

Security measures

We apply appropriate technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure.

We periodically review our procedures to maintain an adequate level of security.

Team and authorised managers

We process identity, contact, employment documents, training, contracts, assigned services, working hours and travel allowances to organise work and meet employment and legal obligations. The bases are the employment contract and legal obligations; optional image publication requires a separate permission. Administration and authorised managers have access according to their duties. Each worker consults her own hours and assignments; clients do not receive complete personnel records.

Working time records subject to Spanish employment law are kept for four years; other employment records follow their applicable legal or liability periods. Maintaining a profile without a photograph is possible. Refusing an optional image permission does not affect employment, pay or app access.

Agenda billing and archive

Google Calendar can supply events to the app agenda when connected by administration. The platform uses assignments and individual schedules to organise services and calculate hours and travel. Google Drive archives issued invoices when the connection is enabled. These records may include the minimum necessary service, worker, customer and billing details.

Managers receive access according to the permissions assigned to their accounts. Creating an external or internal service does not grant marketing permissions or permission to publish photos. Accounts, financial documents and personnel records are not public.

Images and optional permissions

Photos or videos sent for a quote, a service or support are private operational information. Uploading them does not authorise publication on the website, social media or advertising materials.

Publishing an identifiable person requires a specific valid authorisation, separate from the service or employment relationship, with the material and channels identified. Permission can be withdrawn at info@iglow.es. Images of spaces require the appropriate authority and removal of people, addresses, documents and security details. A client cannot consent on behalf of other adults. Minors require a separate assessment and appropriate authorisation.

Forms and privacy rights

You may request your rights by emailing info@iglow.es or writing to our registered address; our downloadable form is optional. We respond without undue delay, normally within one month. A legally justified extension is communicated during that first month. We do not routinely require identity document copies; proportionate additional information may be requested where there are reasonable identity doubts.

These are blank forms for specific uses. Downloading or receiving a form does not grant consent. Signed permissions are stored privately and separately from the booking.

Last updated

9 October 2026.