keepstage

Legal

Privacy policy

Last updated: 28 October 2026

Who is responsible for your data

Controller
César García Cabeza, trading as Smart Growth (brand: Keepstage)
Status
Sole trader resident in Andorra
Tax ID (NRT)
F-377381-B
Address
Avinguda Carlemany 75, 4a, AD700 Escaldes-Engordany, Andorra
Contact for privacy requests
legal@keepstage.com

We apply the Andorran data protection law (Llei 29/2021, del 28 d’octubre, qualificada de protecció de dades personals, “LQPD”) and, because this website is offered to people in the European Union, the EU General Data Protection Regulation (“GDPR”, article 3(2)). The European Commission recognises Andorra as providing adequate protection (Decision 2010/625/EU).

What this policy covers

This website (keepstage.com), the booking form on it, emails you send us, and our own business-development contacts. When we run an event or an After-Show for a company, that company is the controller of its attendees’ data and we act as its processor under a data processing agreement; the company’s own privacy notice applies to those attendees, and they should contact that company first.

What we collect, why, and on what legal basis

  • The booking form. Your email, first name, company, role, the service you are interested in, event date or timing, expected attendees, webinar platform, webinars per month, CRM and HubSpot plan, budget range, a link to your last event and any notes you write, plus the page you sent it from, the page you came from just before it (only the website name if it was another site) and which of our buttons you clicked to reach it. Purpose: to answer your request, prepare the call and, if you become a client, to manage the relationship. Legal basis: steps taken at your request before a possible contract (GDPR art. 6(1)(b)) and, where you write on behalf of a company, our legitimate interest in answering business enquiries (art. 6(1)(f)), with the equivalent provisions of the LQPD.
  • Booking a call. If you pick a time in the calendar shown after the form, the booking tool receives your name, email and chosen slot, and a calendar invitation is created. Purpose and legal basis: as for the form.
  • The behind-the-show write-up, only if you tick the box (it is never pre-ticked): your email and name, to send it to you about once a month. Legal basis: your consent (art. 6(1)(a)), which you can withdraw at any time with the unsubscribe link or by writing to us. Withdrawing does not affect earlier sending.
  • Emails you send us at hello@keepstage.com or legal@keepstage.com: your address, your message and anything you attach. Purpose: to reply and keep a record of the conversation. Legal basis: our legitimate interest in answering and in keeping business correspondence (art. 6(1)(f)), or pre-contractual steps where you ask about our services.
  • Visit statistics. We use Cloudflare Web Analytics to count page views, referring sites, browser type and country. It sets no cookies, does not use your IP address to build a profile and does not track you across sites; we only see aggregated figures. Legal basis: our legitimate interest in knowing which pages are read (art. 6(1)(f)).
  • Technical data. Our hosting provider processes your IP address and request headers (browser, page requested, time) to deliver the site and protect it against abuse. We do not keep our own server logs. Legal basis: our legitimate interest in running a secure website (art. 6(1)(f)).
  • Business development. We may contact professionals whose role makes Keepstage relevant to them, mainly on LinkedIn. We keep only your name, role, company, public LinkedIn URL, a business email if you gave it to us or it is publicly listed for that purpose, the public post or event that prompted the contact, and the history of our messages. Source: your public LinkedIn profile or your company’s website. Legal basis: our legitimate interest in offering our services to businesses (art. 6(1)(f)). You can object at any time and we stop immediately.

We do not make decisions about you based solely on automated processing, we do not identify companies from visitors’ IP addresses, and we do not buy contact lists.

Who receives it

We use these service providers, who process the data on our behalf (as processors) under their data processing terms:

  • Cloudflare, Inc. (United States): website hosting, content delivery, security, visit statistics and forwarding of emails sent to our @keepstage.com addresses. Transfer safeguard: EU-U.S. Data Privacy Framework, with Standard Contractual Clauses as a fallback.
  • HubSpot, Inc. (United States) and its group: CRM, form submissions, the booking calendar and the write-up mailing. Our account is set up in HubSpot’s EU data centre; HubSpot may still access data from outside the EU. Transfer safeguard: EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
  • Google LLC (United States) and its group: the mailbox that receives our email, and our calendar and video calls. Transfer safeguard: EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

We may also disclose data where the law requires it (for example to tax authorities for invoicing, or to a court). We do not sell your data or share it with anyone for their own marketing.

How long we keep it

  • Form submissions and call notes that do not lead to a contract: deleted 24 months after our last contact.
  • Clients: for the duration of the relationship and then as long as Andorran tax and accounting law requires us to keep invoices and contracts.
  • Emails: 24 months after the last message in the conversation, unless they form part of a client file.
  • Write-up subscribers: until you unsubscribe; we keep a record of your consent and of the unsubscription for as long as we may need to prove them.
  • Business-development contacts who do not reply: deleted or anonymised 12 months after our last message. If you ask us not to contact you again, we keep only your LinkedIn URL or email on a do-not-contact list so that we respect that request.
  • Visit statistics: we only see aggregated figures, which contain no personal data. Technical data processed by Cloudflare is kept for the short periods set out in Cloudflare’s own terms.

Cookies

This website sets no cookies of its own and uses no advertising or tracking pixels. Fonts are served from our own domain, so loading a page does not contact any font provider. Cloudflare may set a strictly necessary security cookie to protect the site against bots and abuse; it is exempt from consent.

After you submit the form, you can choose to show a booking calendar provided by HubSpot inside a frame. It only loads when you click “Show calendar”. Once loaded, HubSpot may set its own cookies within that frame, which are governed by HubSpot’s privacy policy. If you prefer not to, leave the calendar closed: we will reply to your form by email instead.

Your rights

Under the LQPD and the GDPR you can ask for access to your data, its rectification or erasure, restriction of processing, data portability, and you can object to processing based on legitimate interest (including business-development contact, at any time) and withdraw any consent. Write to legal@keepstage.com. We answer within one month; we may ask you to confirm your identity if we have reasonable doubts.

If you think we have not handled your data properly, you can complain to the Andorran Data Protection Agency (Agència Andorrana de Protecció de Dades, APDA, apda.ad) or, if you live or work in the EU, to the data protection authority of your country of residence or work, or of the place of the alleged infringement. We would appreciate the chance to sort it out with you first.

Security

The site is served over HTTPS only, and we give access to your data only to the providers listed above.

Changes

If we change this policy, we will publish the new version on this page with a new “Last updated” date. If a change materially affects how we use data you have already given us, we will tell you by email before it applies.