Back to home

Privacy Policy

Last updated: 10 November 2026

1. Data Controller

The controller of the personal data processed through this website is:

  • Controller: Ian Williams Monardez
  • Trade name: Williams Infinity
  • Business activity: AI training, consulting and implementation, and software development for businesses
  • Location: Manresa (Barcelona), Spain
  • Email: [email protected]
  • Phone: +34 635 844 985
  • Website: https://williamsinfinity.com

2. Personal Data We Process

  • Contact form: full name, work email, company, phone (optional), the services you are interested in, your answers about your needs and, if you ask about training, number of people, hours, format, groups, goals, level, tools and preferred dates, plus anything else you choose to tell us. Fields marked with * are required to handle your request.
  • Technical data of the submission: your IP address, used to check that the submission is not automated and to limit the number of submissions, and the page from which you send the form.
  • Origin of the visit (only if you accept analytics cookies): the page where you entered the site, the referring website, campaign parameters (UTM) and, if you came from an ad, the platform (Google, Microsoft, Meta or LinkedIn), never the click identifier. They are stored with your request if you send it.
  • Direct communications: the data and content of the messages you send us by email, phone or WhatsApp.
  • Call bookings: the details you enter when booking a call through our Google Calendar booking page.
  • Browsing: when you visit the site, our hosting and network providers process your IP address and technical request data to serve the pages and protect them against abuse. With your consent, Google Analytics collects the pages you visit, interactions such as clicks on contact links, use of the form or downloading the catalogue, device and browser type, and approximate location.

3. Purposes and Legal Bases

  • Handling your request (acknowledgement email, proposal and follow-up): pre-contractual steps taken at your request (Art. 6(1)(b) GDPR). When you contact us on behalf of a company, our legitimate interest in maintaining the relationship with it (Art. 6(1)(f) GDPR and Art. 19 of the Spanish LOPDGDD).
  • Providing contracted services and managing the client relationship: performance of a contract (Art. 6(1)(b) GDPR).
  • Protecting the form against automated submissions and abuse: our legitimate interest in the security of the website (Art. 6(1)(f) GDPR).
  • Knowing which channel requests come from: your consent (Art. 6(1)(a) GDPR), given when you accept analytics cookies.
  • Measuring website use with Google Analytics: your consent (Art. 6(1)(a) GDPR and Art. 22.2 of the Spanish LSSI).
  • Complying with legal obligations, such as tax and accounting obligations: legal obligation (Art. 6(1)(c) GDPR).

4. Recipients and Service Providers

We do not share your data with third parties unless legally required. The following providers process data on our behalf as processors, under data processing terms in accordance with Article 28 GDPR:

  • Vercel Inc. (USA): hosting of the website and of the server that receives the form.
  • Cloudflare, Inc. (USA): content delivery and protection of the website, and verification of the form (Cloudflare Turnstile). For Turnstile, Cloudflare also uses these technical signals to improve its bot detection, as an independent controller.
  • Supabase Pte. Ltd. (Singapore), on Amazon Web Services infrastructure: database of our sales management tool, where your request is recorded.
  • Resend (Plus Five Five, Inc., USA): sending the acknowledgement email and the internal notice of each request.
  • Google Ireland Limited: Google Analytics, only with your consent, and Google Calendar, if you book a call.

If you write to us on WhatsApp, the service is provided by WhatsApp Ireland Limited under its own terms and privacy policy.

5. International Transfers

Vercel, Cloudflare, Resend and Google belong to US companies or groups and Supabase is based in Singapore, so some data may be processed outside the European Economic Area. These transfers rely on the standard contractual clauses approved by the European Commission and, for Vercel, Cloudflare, Resend and Google, also on their certification under the EU-US Data Privacy Framework.

6. Data Retention

  • Requests, contacts and clients: for as long as needed to handle your request and, where applicable, the business relationship; afterwards, blocked for the periods during which legal liabilities may arise, and then deleted or anonymised.
  • Technical copies of each form submission, used to avoid duplicates and deliver notices: their personal content is deleted after 90 days, once the notices have been sent.
  • Origin of the visit: in your browser until the browsing session ends; if you send the form, it is kept with your request.
  • Google Analytics: its cookies last up to 2 years and the data is kept for the retention period configured in our account.
  • Cookie preference: until you delete or change it; we ask again after 24 months at most.

7. Automated Decisions

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

8. Your Rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing; for analytics cookies, use “Cookie settings” at the bottom of any page.

Write to [email protected] stating the right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it. We will reply within one month, which may be extended in the cases provided for in the GDPR.

If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

9. Changes

We may update this policy to reflect legal changes or changes in our services, and we will publish the current version on this page with its date. Cookies are explained in our Cookie Policy.