Privacy Policy

SolidMaint ("we", "our", or "us") is committed to protecting your personal data and your right to privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, subscribe to our service updates, or contact us. We comply with the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law on Personal Data Protection (LOPDGDD 3/2018).

We only collect data you provide voluntarily. Bookings and service requests submitted through the website may be transmitted to SolidMaint’s own booking platform. The privacy notice for our customer and crew apps is available at api.solidmaint.com.

Subscribers

• Full name, email address and phone number
• Postal code and region
• Services you are interested in
• Sign-up timestamp

Contact forms and care-plan requests

• Full name, email address and optional phone number
• Property location, region, type and selected services
• Message content and submission timestamp

Admin and authenticated accounts

• Email address and encrypted password
• Assigned role
• Login timestamps and session metadata

Technical and security data

• IP address, browser type and version
• Pages visited and timestamps
• Bot-protection challenge results

Job applicants

• Name and contact details
• Cover letter, motivation, LinkedIn or portfolio link
• CV or résumé and submission timestamp

Partner applications

• Company and contact name
• Email address, phone number and website
• Message content and submission timestamp

Website usage data

• Pages viewed and the order in which they were viewed
• Clicks, taps, scrolling and mouse movement
• Session replays, with form entries masked
• Device, browser, screen size and approximate location
• First-party analytics identifiers stored in _cs_ (Contentsquare) and _ga (Google Analytics) cookies

We do not collect special categories of personal data and do not knowingly collect data from children under 16. Please do not include special-category data in your CV, cover letter or messages.

Under Article 6 of the GDPR, we rely on the following lawful bases:

• Consent: service updates, product news, analytics and advertising measurement where you have opted in.
• Pre-contractual measures: answering enquiries, assessing applications, preparing quotes and handling booking or service requests.
• Legitimate interests: operating the business safely, managing authorised accounts and protecting the site from abuse.
• Legal obligations: accounting, tax records and responding to lawful requests from authorities.

We keep personal data only as long as needed for each purpose, then delete or anonymise it.

• Subscriber data: until you unsubscribe or after 24 months of inactivity, whichever comes first.
• Contact-form messages: 24 months, followed by up to 12 months of archived retention for disputes.
• Server and security logs: 12 months.
• Admin account data: while the account is active and for 12 months after closure.
• Accounting and tax data: up to 10 years where required by Spanish law.
• Job applications: 180 days, unless you consent to us retaining them for future roles.
• Partner applications and service requests: up to 24 months after your last contact.
• Contentsquare and Google Analytics usage data: while consent remains valid and no longer than the retention period configured in each tool (14 months at most for Google Analytics); Contentsquare cookies expire within 13 months and Google Analytics cookies within 2 years.

We share data only with carefully selected organisations that help us operate our services. Processors act on our instructions under GDPR-compliant agreements. Where Meta determines its own advertising purposes, we act as joint controllers under Article 26 GDPR. For Google Ads measurement, Google acts as an independent controller under its Controller-Controller Data Protection Terms.

• Lovable Cloud: backend, database and authentication hosting in the EU.
• Resend Inc.: transactional and marketing email delivery in the United States.
• Cloudflare Inc.: DNS, delivery, DDoS and bot protection through its global network.
• Lovable.dev: website build and deployment tooling in the EU.
• Meta Platforms Ireland Ltd.: advertising measurement through Meta Pixel and Conversions API, only after marketing consent.
• Content Square SAS: analytics, heatmaps and session replay, only after analytics consent; data is stored in Ireland.
• Google Ireland Ltd.: website analytics through Google Analytics, only after analytics consent, and advertising measurement through Google Ads, only after marketing consent.

We never sell your personal data or otherwise share it for cross-context behavioural advertising.

Resend, Cloudflare and, if you accept the matching cookies, Meta and Google may process data in the United States. Contentsquare stores data in the EU, but personnel outside the EEA may access it for support.

Transfers are protected using safeguards recognised under Chapter V GDPR, including European Commission Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework, together with encryption in transit and at rest. Request details at privacy@solidmaint.com.

Under GDPR Articles 15–22 and Spanish law, you may have the right to:

• access your personal data;
• correct inaccurate or incomplete data;
• request erasure or restriction;
• receive portable data;
• object to processing, including direct marketing;
• withdraw consent at any time; and
• not be subject to qualifying automated decisions or profiling.

Email privacy@solidmaint.com to exercise a right. We may ask you to verify your identity and will normally respond within one month. You may complain to the Spanish Data Protection Agency at aepd.es.

Our technical and organisational safeguards include:

• encryption in transit and at rest;
• strict access controls;
• bot protection and rate limiting on public forms; and
• regular security reviews and prompt dependency updates.

By default, only strictly necessary local-storage entries are used for preferences and consent. Non-essential cookies load only if accepted. Analytics cookies enable Contentsquare and Google Analytics; marketing cookies enable the Meta Pixel and Google Ads. You may decline or withdraw consent at any time. Read the full Cookie Policy.

Our services are not directed to children under 16. If you believe we have inadvertently collected a child’s data, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. The effective date above reflects the latest revision. Material changes may be communicated by email or through a website notice.

For privacy questions or to exercise your rights, email privacy@solidmaint.com.

We have not appointed a formal Data Protection Officer because we are not legally required to do so under Article 37 GDPR. This email address is the point of contact for all data-protection matters.