Privacy policy

August 2026

Not legal copy yet. This is an accurate skeleton — it no longer claims the wrong jurisdiction — but the bracketed items need confirming and the whole document needs a lawyer’s eye before launch. It replaces boilerplate that referenced a South African (Pty) Ltd and “the laws of the Republic of South Africa”, which was simply untrue of EL FIN.

EL FIN is a design studio operating from Berlin and San Salvador. This policy explains what personal information we collect when you use this website or contact us, why we collect it, and what rights you have over it.

Because we are established in the EU, our processing of personal data is governed by the General Data Protection Regulation (GDPR).

1. Who we are

Controller: [LEGAL ENTITY NAME AND REGISTRATION NUMBER TO CONFIRM] Address: [REGISTERED ADDRESS TO CONFIRM] Contact for data protection: hello@eselfin.com

2. What we collect

We collect only what we need.

  • When you contact us — your name, email address and whatever you write in your message. We use this to reply and, if it becomes a project, to run it.
  • When you visit — our host processes your IP address and basic request data in order to serve the site securely. [CONFIRM WHAT THE HOST RETAINS AND FOR HOW LONG]

Analytics — we use Google Analytics to count page views, so we can see which work gets looked at. It runs only if you accept it in the notice on your first visit; until then nothing is loaded or sent to Google. Your choice is stored in your browser, and you can change it by clearing this site’s data.

We do not use advertising trackers, and we do not sell or share personal data with third parties for their own purposes.

3. Why we are allowed to

  • Legitimate interest — replying to an enquiry you sent us, and keeping the site available and secure.
  • Contract — where we are working together, to deliver the work.
  • Legal obligation — where retention is required, for example for tax.

4. How long we keep it

Enquiries that do not become projects are deleted after [RETENTION PERIOD TO CONFIRM]. Project records are kept for as long as the commercial relationship requires, plus any statutory retention period.

5. Who else processes it

Our processors are listed here so you can see where data goes:

  • [HOSTING PROVIDER — TO CONFIRM]
  • [EMAIL PROVIDER — TO CONFIRM]
  • [FORM / CRM DESTINATION — TO CONFIRM]

6. Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to data portability. To exercise any of these, write to hello@eselfin.com.

You also have the right to complain to a supervisory authority. In Germany that is the data protection authority for the state in which we are established.

7. Changes

If this policy changes materially we will update the date at the top of this page.