Skip to content

Legal

Legal information

Last updated: November 4, 2026

Privacy policy

Controller: Jose Vignes Asto (MedUXStudio), Tax ID Z2330524P, info@meduxstudio.com. We process your data under the GDPR and Spain's data protection law (LOPDGDD). The form is for physicians and medical centers: we never ask for patient health information.

What we collect and why

  • Audit form: name, email, phone (optional), practice, city, specialty or type of center, current website, message, region, and language. We use it to answer your request and prepare your audit. Legal basis: your consent and the pre-contract steps you request (Art. 6(1)(a) and 6(1)(b) GDPR).
  • Call booking (Cal.com): the details you enter when booking, to manage the appointment.
  • Campaign data: landing page and UTM parameters, without identifying you.
  • Analytics (Google Analytics 4 and Microsoft Clarity): only with your consent, which you can withdraw in "Cookie settings".

How long we keep it

Form data is kept for as long as the business relationship lasts and, if no relationship is established, for a maximum of 12 months from the last contact. After that, it is blocked for the applicable legal retention periods (up to 6 years for commercial and accounting records, and 4 years for tax purposes) and then deleted.

Providers and transfers

  • Cloudflare: website hosting.
  • Google Workspace (Google Ireland Ltd.): email and the request log.
  • n8n Cloud (n8n GmbH, Germany): receives and logs the form.
  • Cal.com: call scheduling.
  • Google Analytics and Microsoft Clarity: only if you accept analytics.

Some of our providers may process data outside the European Economic Area: Google (email and storage), Cal.com (appointment scheduling) and Cloudflare. In those cases, transfers are covered by the EU-U.S. Data Privacy Framework, where the provider is certified, or by the Standard Contractual Clauses approved by the European Commission, included in their data processing agreements.

Your rights and security

You can request access, correction, deletion, objection, restriction, and portability, or withdraw your consent, by writing to info@meduxstudio.com. You can also file a complaint with the Spanish Data Protection Agency (www.aepd.es).

The form uses an encrypted connection and spam protection. Personal data never travels in URLs or analytics.

For U.S. visitors

We don't sell or share your personal information or use advertising cookies. Depending on your state (for example, California under the CCPA/CPRA), you may have rights to know, delete, and correct your information; you can exercise them at the email above. This website doesn't collect protected health information (PHI). If a project requires handling PHI, the tools are contracted under HIPAA, with a Business Associate Agreement (BAA) where applicable. [POR CONFIRMAR with legal counsel]

Cookie policy

We only use technical storage and, if you accept, analytics cookies. We don't use advertising cookies.

Necessary (always on)

  • medux_consent_v1 (local): your cookie choice, 6 months.
  • medux:region (local): your pricing region.
  • medux:utm and medux:envios (session): landing page and repeat-submission control; cleared when you close the browser.
  • __cf_bm (cal.com, only on pages with the U.S. scheduler): Cloudflare bot protection when Cal.com loads, 30 minutes.

Analytics (only with your consent)

  • Google Analytics 4 (_ga, _ga_*): usage statistics, up to 2 years, no advertising signals.
  • Microsoft Clarity (_clck, _clsk, CLID): heatmaps and session recordings with forms masked, up to 1 year.

How to manage them

Change your choice anytime in "Cookie settings" in the footer, or delete cookies in your browser. If you reject analytics, the site works the same. In Google Consent Mode, ad_storage, ad_user_data, and ad_personalization are always denied.

MedUXStudio · UX studio for medical specialties

EspañolEnglish
Region