Privacy Policy

1. Who we are

Karmium ("Karmium", "we", "our" or "us") is a Reddit marketing agency operated by Javier Cristóbal Gutiérrez as a self-employed professional (autónomo) based in Spain. We are the data controller responsible for the personal data collected through this website, karmium.com.

For any privacy-related enquiry you can reach us at hi@javi.link.

2. What data we collect

• Contact data: the name, email address, company, service interest, budget range and message you submit through our contact form.
• Usage data: information about how you interact with the site (IP address, browser type, pages visited, time on page), collected only if you accept analytics cookies.
• Consent preferences: your cookie choices are stored locally in your browser so we can remember them.

3. How we use your data

We process your personal data to:

• respond to your enquiries and provide the requested information or audit;
• deliver and manage the services you engage us for;
• understand how the website is used and improve it (analytics, subject to consent);
• comply with our legal obligations.

4. Legal basis for processing

Under the EU General Data Protection Regulation (GDPR) and Spanish Law 34/2002 (LSSI-CE), we rely on the following legal bases:

• Consent — for analytics cookies and for sending you the information you request.
• Performance of a contract — to provide services you have engaged us for.
• Legitimate interest — to respond to enquiries and keep the website secure.
• Legal obligation — where the law requires us to retain or disclose data.

5. Cookies and analytics

We use essential cookies required for the site to work, and — only with your consent — Google Analytics 4 to understand traffic. You can accept, reject or change your choices at any time via the cookie icon. See our Cookie Policy for the full detail.

6. Third parties and international transfers

We do not sell your personal data. We share it only with trusted providers that help us operate the website and our business, under appropriate data-protection terms. These include:

• Cloudflare — website hosting and content delivery (Cloudflare Pages).
• Web3Forms — processing of contact-form submissions.
• Google (Analytics 4) — website analytics, only with your consent.

Some of these providers may process data outside the European Economic Area. Where that happens, transfers are protected by mechanisms recognised under the GDPR, such as Standard Contractual Clauses.

7. Data retention

We keep your contact data for as long as necessary to respond to your enquiry and manage any resulting relationship, and thereafter only as required to comply with our legal obligations. Analytics data is retained according to the retention settings configured in Google Analytics.

8. Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability and to withdraw consent at any time. To exercise any of these rights, contact us at hi@javi.link. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es).

9. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. No method of transmission over the internet is fully secure, however, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top reflects the latest revision. Material changes will be highlighted on this page.

11. Contact

For any question about this policy or your personal data, email hi@javi.link.