Privacy — Spain University Office

Last updated: 2 November 2026.

Who is responsible for your data

The data controller is Stari One, LLC, a Wyoming (USA) limited liability company that operates Spain University Office (registered address: 30 N Gould St, STE R, Sheridan, WY 82801, USA), reachable in Madrid, Spain and at info@spainuniversityoffice.com. That address is also our data-protection contact — there is no separate department, you reach the person responsible directly.

What we collect

When you send the free assessment we receive what you selected and typed: your country, field of study, current education, your name, your WhatsApp number, and your email if you chose to give one. The current form does not ask for grades, a start date or funding details. Older enquiries may contain those answers if you supplied them before the form was shortened. If you request the visa playbook we receive your name and WhatsApp number. If you write to us on WhatsApp or by email, we receive what you send there. Our server also records the page you submitted from and the time you did it.

If you allow optional measurement, Google Analytics and Whop can also receive visit and interaction information, such as pages viewed, browser/device information, referral sources and events described below. We do not attach your assessment answers, name, email address or WhatsApp number to these measurement events.

Why we are allowed to hold it

Your consent, and steps taken at your request before a contract (GDPR Art. 6(1)(a) and 6(1)(b)) — for the assessment, the playbook, and any reply we send. You asked us to assess your case; holding what you typed is how we do that.
Performance of a contract (Art. 6(1)(b)) — once you engage us, for everything your contract covers.
Legal obligation (Art. 6(1)(c)) — invoices and business records we are required to keep.
Your separate consent (Art. 6(1)(a)) — for optional Google Analytics and Whop measurement. Each has its own choice, initially off.
Legitimate interest (Art. 6(1)(f)) — keeping the site secure and blocking spam submissions.

Giving us your details is voluntary. But the assessment cannot be answered without a name and a WhatsApp number — that is what we reply to.

What we use it for

We use enquiry information to assess your situation and reply to you. If you become a client, your information becomes part of your engagement file under the contract. Optional measurement helps us understand which pages and referral sources lead to enquiries. We do not sell, rent or trade your data or send marketing blasts to assessment contacts. Hosting, messaging and optional measurement providers receive the information needed for their roles, as described below. We may also disclose data where a law or a court requires it.

Where it lives

Form submissions are saved in a private database on our website server before we confirm receipt. A notification is then sent to our business mailbox. The database, its backups and our mailbox are hosted with our website and email provider, Hostinger, on servers in the European Union. Conversations you start on WhatsApp are processed by WhatsApp/Meta under their own terms.

Transfers outside Europe

The operator is a US company (Stari One, LLC), so your data may be read from outside the EEA by the person answering you. WhatsApp/Meta may process message data outside the EEA. If you allow optional measurement, Google and Whop may process measurement information outside the EEA, including in the United States. Their privacy notices below explain their international processing and applicable safeguards. You can refuse optional measurement and contact us by email to avoid WhatsApp processing; this does not by itself guarantee that all access to your enquiry stays within the EEA.

How long we keep it

Enquiries that never become clients: deleted 24 months after our last contact with you. Families genuinely do come back a year later; after two years it is dead weight.
Client engagement files: for the life of the engagement and 6 years after it ends — the window in which contract questions can still arise.
Invoices and accounting records: as long as tax law requires.

Ask us to delete earlier and we will, unless a signed contract or a law requires us to keep the record.

Cookies and tracking

Optional measurement is off until you choose it. You can accept all, reject optional measurement, or choose Google Analytics and Whop separately. Refusing does not prevent browsing or submitting a form. Fonts and images are served from our own server.

Privacy choices: we store your choices, the notice version and the time of your choice in this browser for up to 180 days. This record contains no form answers or contact details. If browser storage is unavailable, the choice lasts only for the current page.
Google Analytics: if allowed, measures page visits, scrolling, outbound link clicks, download-link clicks, assessment starts, successfully saved enquiries and WhatsApp-link clicks. Cookies such as _ga distinguish browsers and sessions. Google receives browser/device and network information when its tags run. Automatic site-search, form-interaction and video measurement are not part of this initial setup. Google privacy information.
Whop: if allowed and enabled on this website, measures page visits, assessment starts, successfully saved enquiries and WhatsApp-link clicks to understand referral and funnel performance. Its pixel uses cookies and a browser/device fingerprint to recognise visits. Whop identifier cookies (_wuid and _wuid_link) can last up to two years, and its identifiers in browser local storage remain until cleared. Our withdrawal controls attempt to remove these first-party identifiers. It can also read existing analytics or advertising identifiers in this browser for attribution. We do not supply contact details or assessment answers to it. Whop privacy information.

These privacy choices apply to spainuniversityoffice.com. If you visit our Whop store or checkout, Whop's privacy notice and available cookie controls apply there, including to Google Analytics on those pages. Choices made here do not change your settings on Whop.

Website consent preferences expire after 180 days; this does not define how long a provider retains information already received. Provider retention depends on the service and account settings described in their notices. Contact us for information about the settings applying to your data or to request deletion.

You can reopen here or in any page footer. Withdrawing permission stops future optional measurement for that category. If its code is already loaded, the page reloads to stop its listeners, so unsent form entries may be lost. We also attempt to remove its accessible cookies on this website. This does not delete data already received by a provider, cookies on other domains, or data your browser does not let this page remove. You can additionally clear site data in your browser or exercise the rights below.

How the assessment is scored

The current form records an enquiry for our team to review. It does not score your grades or finances, decide eligibility, or reject anyone automatically. A human reviews your request before giving assessment advice. Older enquiries may retain an internal priority label from the previous form; that label was not an admission decision.

If you are under 18

Much of what we do concerns students who are still minors. In Spain a person aged 14 or over can give this consent themselves; under 14, a parent or guardian should send the form. If you are a parent submitting for your child, you are confirming you are entitled to do so.

Your rights

You can ask us to show you what we hold (access), correct it, delete it, pause our use of it (restriction), object to our use of it, or hand it over to you or another provider in a portable file. Where we rely on your consent, you can withdraw that consent at any time — that stops future use without unpicking what was lawful before.

One email to info@spainuniversityoffice.com does any of them, and we answer within one month.

If we get it wrong

Tell us first — we would much rather fix it. But you always have the right to complain to a data protection authority. In Spain that is the Agencia Española de Protección de Datos (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid). If you live elsewhere in the EEA, your own national authority will take the complaint too.

Your data, in plain language.