1. Who processes your data
The controller of the personal data collected through house-redesign.com, its subdomains and the official channels of Hard Re Design (the "Company", "we") is Hard Re-Design LLC, with address and contact details available in the Site's Contact section.
For any question, request or complaint related to personal data you can write to info@house-redesign.com. If the Company appoints a Data Protection Officer (DPO) or a representative in your jurisdiction, that information will be published on this same page.
By using the Site or the Services you state that you have read this Policy. This Policy does not replace the Terms of Use but complements them: together they form the framework you accept when creating an account, sending a request or contracting a service.
2. What data we collect
We collect only the data necessary to provide the service, comply with legal obligations and protect the platform. Depending on how you use the Site, the data may be:
- Identification and contact data: name, surname, email address, phone number and, if you provide it, address and company or project details.
- Account data: requested role, credentials (the password is stored encrypted in the identity provider, never in plain text), registration date and activation status.
- Service data: content of the forms, messages, quotes, appointments, files or plans you decide to send us, and conversations with the AI assistant.
- Billing and collection data: billing details, payment history and transaction identifiers (full card details are processed by the payment provider, we do not store them).
- Technical data: IP address, device identifiers, browser and operating system, access date and time, security logs and usage events.
- Communication data: email, WhatsApp, SMS or social network messages, and the contact preferences you choose.
We do not collect special categories of data (health, ethnic origin, beliefs, biometric data) or criminal record data. If sending that information is not necessary for the service, we ask you not to include it in your messages or files.
3. Adults only (18+)
The Site and the Services are exclusively for persons who have reached 18 years of age. They are not directed at minors and data from minors is not intentionally collected: registration requires an express declaration of legal age, which is recorded with the date and version of the accepted legal documents.
If we learn that an account belongs to a person under 18, we will suspend it and delete the associated data as soon as possible. If the data belongs to a minor and was provided by a third party (for example, in a message or form), we will delete it at your request or on our own initiative upon detection.
If you are a parent or legal guardian and believe a minor provided us with data, write to info@house-redesign.com and we will resolve it at no cost.
4. Why we use the data and on what legal basis
We process your data for specific purposes, each with a legal basis (Article 6 GDPR and equivalent rules in other jurisdictions):
- Create and manage your account, verify registration and enable access to features according to role: legal basis = performance of the contract.
- Manage requests, quotes, appointments, orders and the provision of the contracted service: legal basis = performance of the contract.
- Invoice, collect and comply with accounting and tax obligations: legal basis = legal obligation.
- Send you operational notifications (activation, service changes, security): legal basis = performance of the contract and legitimate interest.
- Send you commercial communications through the channels you authorize: legal basis = consent (revocable at any time).
- Prevent fraud, abuse and unauthorized access, and maintain security and event logging: legal basis = legitimate interest and legal obligation.
- Improve the Site and the Services through aggregated or pseudonymized statistics: legal basis = legitimate interest.
- Handle complaints and exercise or defend against legal actions: legal basis = legitimate interest and compliance with legal obligations.
5. AI assistants
The Site may handle inquiries through automated artificial intelligence assistants. Conversations may be stored to provide the service, maintain context, improve the quality of the answers and comply with legal obligations.
The assistant is a support tool: it does not constitute technical, legal or financial advice, and it does not replace review by a person. You may request to be attended by a person at any time through the official channels.
We do not use your conversations to train third-party models nor do we transfer them for that purpose. If at some point they were used to improve our own models, it would be done with pseudonymized data and with clear information in this Policy.
7. Who we share data with
We do not sell or rent your personal data. We share it only with providers that allow us to operate, under contractual confidentiality and security obligations, and only with the data necessary for their function:
- Identity and authentication provider (Keycloak or another IdP) for registration, session and roles.
- Cloud infrastructure and storage providers, including database, backup and file synchronization services.
- Messaging and transactional email providers (for example WhatsApp Business, email, SMS).
- Payment and billing providers, to process charges and issue receipts.
- Professional advisors (accounting, legal, auditors) bound by a duty of secrecy.
- Public authorities, where there is a legal obligation, a valid request, or where necessary to exercise or defend rights.
If the Company takes part in a merger, acquisition or sale of assets, data could be transferred as part of the transaction; in that case you will be informed and the same guarantees of this Policy will be maintained.
8. International transfers
Some providers may be located in countries other than yours, so your data could be processed outside your jurisdiction. In those cases we apply appropriate safeguards: standard contractual clauses, assessment of the provider’s security and, where applicable, transfers limited to what is strictly necessary to provide the service.
You may request information about the safeguards applicable to a specific transfer by writing to info@house-redesign.com.
9. How long we keep the data
We keep the data only for the time necessary for the purposes described or as required by law. Reference periods:
- Account and project data: while the account is active and up to 24 months after its closure.
- Billing and payment data: 10 years (accounting and tax obligations).
- Inquiries and support: 24 months from the last contact.
- Technical and security logs: 12 months.
- Fraud and abuse prevention: 24 months (fraud and abuse prevention).
- Commercial communications: until you withdraw consent.
Before deleting data we no longer need, we anonymize or aggregate it for statistical purposes so that a person cannot be identified.
10. Information security
We apply reasonable technical and organizational measures to protect the data: encryption in transit, role-based access control, passwords stored irreversibly in the identity provider, audit event logging and restricted access for staff and providers who need it. Where the contracted service includes it, database backups are generated and stored outside the operating cluster.
No system is infallible. If a security breach affects your data, we will notify the affected persons and the competent authorities where applicable, within the legal deadlines, with the information available about its scope and impact.
11. Your rights and how to exercise them
Depending on your jurisdiction (for example GDPR in the European Union, CCPA/CPRA in California, and equivalent local rules), you have the right to:
- Access the data we process about you and obtain a copy.
- Rectify inaccurate or incomplete data.
- Erase data when it is no longer necessary or when you withdraw consent.
- Object to processing or request its restriction, as applicable.
- Port your data to another provider in a structured, commonly used format.
- Withdraw consent at any time, without retroactive effect on processing already carried out.
- Not be subject to automated decisions with significant effects without human intervention.
- Lodge a complaint with the supervisory authority of your jurisdiction (and, in California, not be discriminated against for exercising these rights).
To exercise any of these rights write to info@house-redesign.com stating which right you wish to exercise and from which contact email. We will respond within the applicable legal deadlines. We may request reasonable additional information to verify your identity and avoid disclosing data to unauthorized third parties.
12. Changes to this Policy
This Policy may be updated to reflect changes in the service, in the providers or in applicable regulations. The current version will always be published on this page with its update date; each version has a number (today 1.1) and relevant changes are communicated through the usual channels before they take effect.
Use of the Site after a new version takes effect implies its acceptance. If you do not agree with the updated version, you may request the closure of your account by writing to info@house-redesign.com.
Version history
Current version: 1.1, effective October 27, 2026. This history records which text was in force at each moment. The description of each version is published in Spanish in the Spanish version of this document, which prevails.
- Version 1.1 — in force since October 27, 2026
- Version 1.0 — in force since October 26, 2026