Privacy Policy
Last updated: July 2026
This policy describes how the personal data of users of https://ambitiousroi.com is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable data protection regulations.
1. Data Controller
- Data Controller: Ángel Luis Martín González
- NIF: 25614634V
- Address: Calle Almogía, 14 — 29007 Málaga (Spain)
- Contact Email: angel@ambitiousroi.com
2. Data Collected and Its Origin
- Contact / Audit Form: Name, email address, website or company name, and approximate monthly ad spend — data provided voluntarily by the user.
- Contact via WhatsApp or Email: Any data provided by the user in their message (phone number, profile name, conversation content).
- Browsing Data: Collected through cookies and similar technologies, always subject to the user's prior consent (see Cookie Policy).
3. Purposes and Legal Basis
| Purpose | Legal Basis (Art. 6 GDPR) |
|---|---|
| To respond to information and free audit requests, and manage pre-contractual inquiries | Performance of pre-contractual measures at the request of the data subject (Art. 6.1.b) |
| Commercial and client relationship management (CRM), including the provision of contracted services | Performance of a contract (Art. 6.1.b) and legitimate interest in the structured management of business contacts (Art. 6.1.f) |
| Sending commercial communications regarding our own professional services | Consent of the data subject (Art. 6.1.a) or existing business relationship |
| Website usage analytics and advertising performance measurement | Consent of the data subject granted via the cookie banner (Art. 6.1.a) |
4. Recipients and Data Processors
Data will not be shared with third parties unless required by legal obligation. To deliver our services, we utilize the following third-party providers who act as data processors under the requirements of Art. 28 GDPR:
- HubSpot, Inc. — Contact management and CRM services.
- IONOS SE — Web hosting and corporate email infrastructure.
- Google Ireland Ltd. / Google LLC — Web analytics (Google Analytics 4), tag management (Google Tag Manager), and advertising (Google Ads).
- Microsoft Corporation — Behavioral analytics and mapping (Microsoft Clarity).
- Meta Platforms Ireland Ltd. — Conversion measurement and advertising audiences (Meta Pixel).
- WhatsApp Ireland Ltd. (Meta) — Instant messaging services, when selected as a contact channel by the user.
5. International Data Transfers
Some of the providers mentioned above (HubSpot, Google, Microsoft, Meta) are headquartered in the United States and may process data outside the European Economic Area. These transfers are carried out under the safeguards of the EU-U.S. Data Privacy Framework for certified entities and/or Standard Contractual Clauses (SCCs) approved by the European Commission.
6. Data Retention Periods
- Contact and Audit Requests: Kept for the time necessary to process the request, up to a maximum of 2 years from the last interaction if no commercial relationship is formalized.
- Client Data: Retained for the duration of the contractual relationship and subsequently for the periods required under applicable commercial, tax, and civil regulations.
- Browsing Data: Retained according to the periods specified in our Cookie Policy.
7. Rights of the Data Subject
You can exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability at any time, as well as withdraw any consent previously given, by writing an email to angel@ambitiousroi.com with the subject line "Data Protection" and including details that allow us to verify your identity.
If you believe that your data is not being processed in accordance with applicable regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
8. Security Measures
Appropriate technical and organizational measures are applied to ensure data security, including communication encryption (HTTPS), restricted access control to administration and client tools, and the strict selection of providers with optimal security compliance guarantees.
9. Updates to This Policy
This privacy policy may be updated to reflect regulatory changes or changes in our data processing practices. The current valid version will always be the one published on this page.