Privacy policy

At RightNOW Spain we take your data seriously. This page explains, in plain terms, what information we process, why, on what legal basis and how you can exercise your rights, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

For any privacy matter or data-protection rights request you can write to info@right-now.es.

2. What data we process

• Account and contact data: name, email and language.
• Pre-purchase lead data: name, surname and email if you leave them in NAVI, a generator, a form or before checkout but do not yet buy a product.
• Data you provide in forms and to NAVI: the description of your situation, personal data and, where relevant, case data (for example, NIE, administrative or employment status).
• Documents you upload for review, preparation or case tracking.
• Payment data: handled by our payment processor Stripe; we do not store your full card details.
• Usage and technical data: IP address, device, pages visited and cookies (see the cookies section).

3. Why we use your data, and the legal basis

• To provide the service (analysing your situation with NAVI, generating routes and documents, tracking your case) — basis: performance of the contract.
• To handle payments and invoicing — basis: contract and legal obligation.
• To answer your enquiries sent via forms or email — basis: your consent or our interest in replying.
• To send marketing related to your request (for example, reminding you about an unfinished order or a relevant RightNOW service) — basis: consent or legitimate interest; you can opt out at any time.
• To improve the platform and measure usage (analytics) — basis: consent (cookies) or legitimate interest in a secure, working service.
• To comply with legal obligations (tax, accounting) — basis: legal obligation.

4. Artificial intelligence (NAVI)

NAVI processes the information you give us to structure your situation, suggest a route and prepare documents. We do not make automated decisions producing legal effects about you without human involvement: AI is a support tool, and decisions affecting your case are made by the relevant authorities, organisations or professionals. You can ask how your case was handled and request human review.

If you use NAVI or a generator as a user and do not become a client, your prompts and free-text answers are not stored beyond your actual session, unless you separately ask us to submit an unsupported-topic request for research. Information about a non-client user’s personal situation may be used for statistics and demand research only in anonymised and aggregated form, without being linked to an identifiable person. If you place an order, the prompt, documents and context may become part of the order materials and are retained under the rules below.

5. Recipients and processors

We do not sell your data and we do not transfer it to third parties without your consent, except where the law expressly requires it. The following providers may access it, as processors and only to deliver the service:

• hosting and infrastructure: cdmon, Spain / European Union;
• analytics: Google Site Kit / Microsoft Clarity;
• payments: Stripe;
• email and communications.

Where your case requires an external professional (lawyer, gestor, mediator) and you authorise it, we share only the data needed with them. We may also disclose data to authorities where legally required.

6. International transfers

Some technology providers may process data outside the European Economic Area. Where this happens, we apply the safeguards required by the GDPR, including adequacy decisions, standard contractual clauses or equivalent lawful mechanisms.

7. Retention

Order means a specific request for a RightNOW service or product: a consultation, document review, generator, Action Plan, case management, RightNOW Sent delivery, Protection Plan subscription or another product you expressly choose.

Client personal data linked to an order is kept only for the period needed to service that order and is deleted after completion, unless longer retention is required for legal, accounting, payment, security or legal-claims reasons. Case documents and materials are deleted or anonymised after the order work is completed, taking into account any technical recovery period where needed.

For subscription clients, data is kept until the subscription ends and for a further 3 months, so that you can restart without losing your context. If the subscription is not restarted, the context is deleted or anonymised, except for the minimum data we must keep by law.

If you provided your name, surname and email but did not buy a product, those contact details may be kept for marketing purposes for up to 1 year and then automatically deleted if you did not become a client. If you become a client, the retention of those contact details is extended for the whole service relationship and for 1 year after the relationship with RightNOW ends, unless you ask us to delete them earlier and the law does not require otherwise.

Anonymised statistical data and aggregated research may be kept for longer where it cannot reasonably identify a specific person.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability at any time, and withdraw consent, by writing to info@right-now.es. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (AEPD), www.aepd.es.

9. Security

We apply reasonable technical and organisational measures to protect your data (encryption in transit, access controls and backups). No system is infallible, but we work to minimise risk.

10. Minors

RightNOW Spain is intended for adults. If a case concerns a minor, the data must be provided by a parent, guardian or legal representative, or with valid authorisation.

11. Cookies

We use first- and third-party cookies for the site to work and, with your consent, for analytics. You can manage your preferences at any time through the cookie consent tool available on the website.

12. Changes

We may update this policy. The version in force is always published on this page.

Last updated: 27 May 2026. Related documents: Legal notice · Terms and conditions.