Privacy Policy
How we collect, use, and protect your personal data.
Last updated: March 2026
1. Data Controller
Next Chapter Spain is the data controller for personal data collected through this website. We are committed to protecting your privacy in compliance with the EU General Data Protection Regulation (GDPR).
2. Data We Collect
- Contact information: Name, email, phone number (when you fill out forms or book consultations)
- Quiz responses: Nationality, employment type, income range, timeline preferences (when you take the eligibility quiz)
- Documents: Passport scans, criminal record certificates, and other application documents (when you become a client)
- Usage data: Pages visited, time spent (via Google Analytics, if you consent to cookies)
3. How We Use Your Data
- To assess your eligibility for Spain's Digital Nomad Visa
- To process your visa application
- To communicate with you about your case
- To send you relevant information (with your consent)
- To improve our website and services
4. Data Storage and Security
Your data is stored securely using Supabase (EU region) with encrypted storage. Document uploads are stored in encrypted, access-controlled storage. We implement appropriate technical and organizational measures to protect your data.
5. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion of your data
- Restrict processing of your data
- Data portability
- Object to processing
- Withdraw consent at any time
6. Cookies
We use essential cookies for website functionality and optional analytics cookies (Google Analytics) to understand how visitors use our site. You can accept or decline non-essential cookies via our cookie consent banner.
7. Third-Party Services
- Stripe: Payment processing (PCI DSS compliant)
- Cal.com: Consultation scheduling
- Resend: Email delivery
- Google Analytics: Website analytics (with consent)
8. Data Retention
We retain your personal data only for as long as necessary to provide our services and comply with legal obligations. You can request deletion at any time.
9. Contact
For privacy-related inquiries or to exercise your GDPR rights, please contact us.