This Privacy Policy regulates the processing of personal data carried out by LegallyMail (hereinafter, "LegallyMail"), belonging to Cowabi Ltd, with Company Number: 10092807 and registered office at 85 Great Portland Street, First Floor, London W1W 7LT, which acts as data controller.
You can contact our Data Protection Officer at: dpo@legallymail.com
LegallyMail collects and processes the following types of personal data:
We process personal data for the following purposes:
| Purpose | Legal Basis | Retention |
|---|---|---|
|
Provision of certified email service User registration, sending certified emails, managing evidence and certifications, and customer service. |
Performance of service provision contract. | During the validity of the contractual relationship and subsequently during applicable limitation periods. |
|
Payment and billing management Payment processing, billing, accounting and tax management. |
Contract performance and compliance with legal obligations. | During legal retention periods established in tax and accounting regulations (generally 6 years). |
|
Service-related communications Sending technical notifications, updates, security alerts and administrative information. |
Legitimate interest in keeping users informed about essential aspects of the service. | During the validity of the contractual relationship. |
|
Marketing and commercial communications Sending commercial information about our services, offers and promotions. |
Consent of the data subject, which can be withdrawn at any time. | Until unsubscription is requested or consent is withdrawn. |
|
Service improvement Usage analysis, statistics, satisfaction studies and development of new features. |
Legitimate interest in improving our services and user experience. | Data will be anonymized when no longer necessary for this purpose. |
|
Security and fraud prevention Protection against unauthorized access, fraud and illegal activities. |
Legitimate interest in ensuring the security of our systems and users. | During the time necessary to ensure security and subsequently during limitation periods for possible liabilities. |
LegallyMail may share personal information with the following categories of recipients:
Some of our service providers may be located in countries outside the European Economic Area (EEA) that do not provide an equivalent level of data protection. In these cases, we implement adequate safeguards to ensure the protection of your data, such as signing standard contractual clauses approved by the European Commission or adherence to the EU-US Privacy Shield.
You can request detailed information about these transfers and the safeguards applied by contacting our Data Protection Officer.
In accordance with data protection regulations, you can exercise the following rights:
You can exercise these rights by sending a request to our Data Protection Officer (dpo@legallymail.com) or to the postal address indicated above, attaching a copy of your identity document to verify your identity.
You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that your rights have been violated.
LegallyMail implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration or accidental destruction, ensuring an adequate level of security to the risk. These measures include:
Despite these measures, no data transmission over the Internet or storage system can be guaranteed as 100% secure. If you have reason to believe that your interaction with us has ceased to be secure, please notify us immediately.
We retain personal data only for the time necessary to fulfill the purposes for which they were collected, including compliance with legal, accounting or reporting requirements.
Certificates and digital evidence are retained for a minimum period of 5 years, in accordance with applicable legislation, or for the time necessary for the formulation, exercise or defense of claims.
To determine the appropriate retention period, we consider the amount, nature and sensitivity of personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data and whether we can achieve those purposes by other means, as well as applicable legal requirements.
Our services are not directed to persons under 18 years of age and we do not knowingly collect personal data from persons under 18 years of age. If you become aware that a minor has provided us with personal data, contact us and we will take the necessary steps to delete the information and deactivate the account.
Our platform may contain links to third-party websites. This Privacy Policy does not apply to those sites, so we recommend that you read the privacy policies of any website you visit.
We may update this Privacy Policy periodically to reflect changes in our information practices or to comply with legal obligations. The updated version will be published on our platform with the revised "last updated" date. We recommend that you review this Policy periodically.
Significant changes will be notified through a visible notice on our platform or by direct email to affected users.
If you have questions, comments or requests related to this Privacy Policy or the processing of your personal data, contact our Data Protection Officer:
We will handle all requests for information, access, rectification or deletion of personal data in accordance with applicable legislation.