Legal

Privacy Policy

Draft for review. This document is a working draft and not yet legal advice. Have it reviewed by a qualified gestor or solicitor before relying on it for live transactions.

LAST UPDATED · MAY 2026

This Privacy Policy explains what personal data Bim3Lab collects, why, and what rights you have under the EU General Data Protection Regulation (GDPR) and Spanish data protection law.

1. Data controller

The data controller is the sole trader (autónomo) operating Bim3Lab, registered in Spain. For any privacy matter, contact info@bim3lab.com.

2. What we collect

Account data: name, email, company (optional), and password (stored hashed).
Subscription data: which plugins you subscribe to, billing period, and licence status.
Payment data: processed by our payment provider (Stripe). We do not store your card details.
Usage data: licence verification requests from the plugins (machine identifier, plugin version) to enforce the per-user device limit.
Contact data: any information you send us through the contact form or by email.

3. Why we use it (legal bases)

To provide the service (performance of a contract): managing your account, subscription, and downloads.
To comply with law (legal obligation): tax, accounting and VAT records.
To protect the service (legitimate interest): licence enforcement and fraud prevention.
To communicate (consent or legitimate interest): responding to enquiries; sending service and update notifications.

4. Who we share it with

We share data only with the processors needed to run the service: our payment provider (Stripe), our email provider, our hosting and database providers, and our analytics provider where applicable. Each processes data on our behalf under appropriate agreements. We do not sell your data.

5. International transfers

Some providers may process data outside the EU/EEA. Where they do, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses.

6. How long we keep it

We keep account and subscription data for as long as your account is active and as required for legal and tax purposes afterwards. You can request deletion subject to those retention obligations.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent at any time. To exercise any right, email info@bim3lab.com. You also have the right to lodge a complaint with the Spanish data protection authority (AEPD) or your local supervisory authority.

8. Cookies

We use essential cookies required to run the site and keep you signed in. Where we use analytics or non-essential cookies, we will ask for your consent first. You can manage cookie preferences in your browser at any time.

9. Changes

We may update this policy. Material changes will be notified through the website or by email.