Legal

Privacy Policy

Last updated: June 2026

1. Who We Are

St Patrick's Valencia (“we”, “our”, “us”) operates the website stpatricksvalencia.com. We are the data controller for personal information collected through this website.

Address: Gran Via del Marqués del Túria, 69, 46005 Valencia, Spain
Contact: contact@stpatricksvalencia.com

2. What We Collect

We may collect the following personal information when you use our website:

  • Contact form data: name, email address, phone number (optional), subject, and the message you write
  • Analytics data: page views, session duration, browser and device type, and approximate geographic location (country / region level only). This is collected only if you accept analytics cookies via our cookie consent banner.
  • Functional cookies: your language preference and your cookie consent choice, stored locally in your browser

We do not collect payment information, government IDs, or any sensitive personal data as defined under Article 9 GDPR.

3. How We Use Your Data

  • Contact form submissions: used solely to read and respond to your enquiry. Data is not used for marketing without your explicit consent.
  • Analytics: used in aggregate to understand how visitors interact with the website and to improve its content and performance.

We do not sell, trade or rent your personal data to any third party.

4. Legal Basis (GDPR)

For visitors in the European Union, we process your data on these bases:

  • Legitimate interest (Art. 6(1)(f)): to operate the website and respond to enquiries you initiate through the contact form
  • Consent (Art. 6(1)(a)): for analytics cookies, only after you explicitly accept via the cookie banner; and for the processing of your contact form data, confirmed by the checkbox before submission

5. Hosting & Infrastructure

This website is hosted on Vercel, a cloud platform that delivers pages through a global edge network. Vercel may process web requests through servers located in the EU and other regions. For details see Vercel's Privacy Policy at vercel.com/legal/privacy-policy.

Contact form submissions and site configuration are stored in a Supabase database hosted in the European Union (Dublin, Ireland). Supabase is SOC 2 Type II certified. Data does not leave the EU region. For details see Supabase's Privacy Policy at supabase.com/privacy.

6. Google Analytics 4

We use Google Analytics 4 (GA4), a service provided by Google LLC, to collect anonymous usage statistics about how visitors interact with this website.

GA4 is not loaded by default. The analytics script is only activated after you explicitly accept analytics cookies via our cookie consent banner. If you decline or have not yet responded to the banner, no GA4 scripts are loaded and no data is sent to Google.

When GA4 is active, data collected includes: pages visited, session duration, browser and device type, and approximate location (country / region only, never precise GPS coordinates). Google may process this data on servers outside the EU under Standard Contractual Clauses. For details see Google's Privacy Policy at policies.google.com/privacy.

You can withdraw your analytics consent at any time by clearing thecookie_consentcookie from your browser settings, which will cause the consent banner to reappear on your next visit.

7. Cookies

We use the following cookies:

Essential / Functional

  • cookie_consent stores your accept / decline choice. Expires after 1 year.
  • sp_lang stores your language preference (EN / ES). Stored in localStorage, not transmitted to our servers.

Analytics (consent required)

  • _ga, _ga_* Google Analytics 4 cookies that distinguish users and sessions. Only set after you accept analytics cookies.

You can delete or block cookies at any time through your browser settings. Blocking essential cookies may affect website functionality.

8. Data Retention

  • Contact form submissions: retained for up to 12 months, then permanently deleted unless you request earlier removal
  • Google Analytics data:governed by Google's retention settings (default 14 months from last activity)
  • Cookie consent preference: stored in your browser for 1 year

9. Your Rights

Under GDPR you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict our processing of your data
  • Withdraw consent at any time (without affecting prior processing)
  • Lodge a complaint with the Spanish Data Protection Authority (AEPD) at aepd.es

To exercise any of these rights, contact us at contact@stpatricksvalencia.com.

10. Changes

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page.