Privacy Policy

Depending on how you interact with NIEasy, we may collect the following:

We only collect what we actually need. We don't ask for more than necessary.

We use your personal data for the following reasons:

The legal basis for processing is either performance of a contract, compliance with a legal obligation, or — where required — your explicit consent.

We don't hold on to data longer than necessary:

Once the retention period ends, your data is securely deleted or anonymised.

We share data only when necessary and only with parties we trust:

We never sell your personal data. Full stop.

Some of the tools we use may process data outside the European Economic Area (EEA). Where that happens, we make sure appropriate safeguards are in place — typically EU Standard Contractual Clauses — so your data is protected to the same standard it would be within the EU.

We take security seriously. Measures we have in place include:

• SSL/TLS encryption on all data in transit
• Strict access controls — only authorised team members can access customer data
• Regular security reviews of our systems and third-party tools
• No storage of raw payment card data on our systems

No system is completely risk-free, but we do everything reasonable to keep your data safe.

As someone whose data we process, you have real rights — not just theoretical ones. Under GDPR, you can:

• Access
• Rectification
• Erasure ("right to be forgotten")
• Restriction of processing
• Objection
• Data portability
• Withdrawal of consent

To understand what each of these means in practice, see section 09 or email us directly. Withdrawing consent doesn't affect anything we processed lawfully before you withdrew it.

Just email us at hello@nieasy.es with your request. We'll respond within one month. We may ask you to verify your identity first — not to make things difficult, but to make sure we're not handing your data to someone else by mistake.

If you feel we've mishandled your data or haven't respected your rights, you're entitled to file a complaint with Spain's data protection authority: the Agencia Española de Protección de Datos (AEPD), at www.aepd.es. We'd obviously prefer you come to us first — but the choice is yours.

We'll update this page if our practices change or the law requires it. When we do, we'll update the "last updated" date at the top. If anything changes significantly, we'll make an effort to let active customers know directly. We won't bury important changes in fine print.

Cookies are small files stored on your device when you visit a website. They help us keep things working and understand how the site is being used. Here's what we use:

You can change or withdraw your cookie preferences at any time through your browser settings or by contacting us.