Privacy Policy

Red Mage is operated by Memento Vivre Fine Arts LLC, a limited liability company registered in the State of Colorado, USA, doing business as Red Mage. I run the company. I am Andrés Sepúlveda Morales, based in Barcelona, Spain.

The data controller for personal data collected through redmage.cc is Memento Vivre Fine Arts LLC (dba Red Mage), Colorado, USA. For anything in this policy, write to me at andres@redmage.cc.

I only collect what I need to answer you and work with you.

• Contact form: your name, email, budget range, and your message.
• Speaking form: your name, organization, event type, event date, and your message.
• If you book a call, the Cal.com scheduler collects your name, email, and any details you add.
• Privacy-friendly, non-identifying usage stats through analytics (see Analytics and cookies below).

I do not ask for special-category data. Please do not include sensitive personal details in a form message.

Under the GDPR, my lawful bases are:

• To answer your message and follow up: your consent when you send the form, and my legitimate interest in responding to people who contact me.
• To prepare or carry out an engagement: performance of a contract, or steps taken at your request before a contract.
• To meet legal duties such as tax and accounting records: a legal obligation under applicable law.

You can withdraw consent at any time. Withdrawing does not affect anything already done before you asked.

• When you submit a form, your message is stored in our database, hosted by Supabase on AWS in the EU (eu-west-1, Ireland).
• When you submit a form, a notification with your details is emailed to me through Resend, my email delivery provider, so I can respond.
• If I contact you in reply, that correspondence is handled through Google Workspace, our email host.
• Bookings are handled by Cal.com under its own privacy policy.

• I keep inquiries for as long as I need them to respond and, if we work together, for the life of our engagement.
• Where the law requires it, for example applicable tax and accounting rules, I keep the related records for the legally required period.
• Inquiries that do not lead to work are deleted or anonymized within 24 months.

I rely on a small number of trusted providers, each for a specific purpose:

• Supabase: database hosting for form submissions (EU, eu-west-1).
• Resend: email delivery for the notification I receive when you submit a form.
• Cal.com: booking scheduling, if you use the booking widget.
• Google: Google Fonts serves the site's fonts, and Google Workspace hosts my email. To deliver fonts, your browser's IP address and request data are shared with Google.
• Plausible Analytics: privacy-friendly, cookieless analytics, with no personal data and no cross-site tracking.
• jsDelivr: serves the icon font. Your browser's IP address and request data are shared with it to deliver those files.

I do not sell your data, share it with advertisers, or use ad networks.

• The site uses Plausible Analytics, which is privacy-friendly, does not use cookies, does not collect personal data, and does not track you across sites.
• The site itself does not set tracking or advertising cookies.
• Embedded third parties, such as the Cal.com scheduler, may set their own cookies when you interact with them, under their own policies.

• Your form data is stored in the EU (Supabase on AWS, eu-west-1, Ireland).
• Because the controlling company is registered in the United States, there is an international element to processing your data.
• Where data moves outside the European Economic Area, transfers rely on appropriate safeguards, such as Standard Contractual Clauses or an adequacy decision, together with data minimization.

Under the GDPR you have the right to:

• Access your data, and get a copy of it.
• Correct data that is wrong or incomplete.
• Ask me to erase your data.
• Restrict or object to how I use it.
• Receive your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with a data protection authority. EU/EEA users may complain to their local authority; in Spain this is the Agencia Española de Protección de Datos (AEPD), at www.aepd.es.

If you are in the United States, you may have rights under applicable state privacy laws, such as the Colorado Privacy Act, and can exercise them through the same contact.

To exercise any right, email andres@redmage.cc. I aim to respond within one month.

• I keep access to submissions small and limited to what is needed to reply.
• I use providers that offer encryption in transit and at rest.
• No system is perfectly secure, but I treat your data with care.

The site and my services are for adults and organizations. I do not knowingly collect data from children.

I may update this policy from time to time. The date at the top shows the latest version.

Questions or requests about your data: andres@redmage.cc.