System_Legal
Legal Framework
Section 01
Privacy Policy
Last updated: January 2026
1. Data Controller. coreloopdev, registered at Carrer del Consell de Cent 310, Barcelona, Eixample, España, is the data controller responsible for the processing of personal data collected through this platform in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation).
2. Data Collection. coreloopdev collects personal data exclusively for the purpose of executing requested services and maintaining professional communication. The categories of data collected include: full name, email address, telephone number, company affiliation, project specifications, and billing information where applicable.
3. Legal Basis for Processing. Personal data is processed under the following legal bases as defined in Article 6 of the GDPR: (a) consent of the data subject, (b) performance of a contract to which the data subject is party, and (c) legitimate interests pursued by the data controller in maintaining and improving service delivery.
4. Data Retention. Personal data is retained for the duration necessary to fulfill the purposes for which it was collected. Project-related data is retained for a maximum of 5 years following the conclusion of the service agreement. Contact form submissions are retained for a maximum of 2 years. Upon expiration of the retention period, data is securely deleted or anonymized.
5. Data Sharing. coreloopdev does not sell, rent, or distribute personal data to third parties for marketing purposes. Data may be shared with: (a) sub-processors engaged for specific technical operations, (b) hosting infrastructure providers necessary for service delivery, and (c) legal authorities when required by applicable law.
6. International Transfers. Where personal data is transferred outside the European Economic Area, coreloopdev ensures appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or adequacy decisions as applicable.
7. Data Subject Rights. Under the GDPR, you have the right to: (a) access your personal data (Article 15), (b) rectification of inaccurate data (Article 16), (c) erasure of personal data (Article 17), (d) restriction of processing (Article 18), (e) data portability (Article 20), and (f) object to processing (Article 21). To exercise these rights, contact [email protected].
8. Data Security. coreloopdev implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption of data in transit, access controls, regular security assessments, and incident response procedures.
9. Supervisory Authority. You have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) if you believe your data protection rights have been infringed.
Section 03
Refund Policy
Last updated: January 2026
1. Scope. This refund policy applies to all services rendered by coreloopdev, located at Carrer del Consell de Cent 310, Barcelona, Eixample, España, including but not limited to web development, cloud infrastructure provisioning, API engineering, and consulting services.
2. Project Milestone Refunds. Services are delivered in defined phases. Refund eligibility is assessed based on the completion status of project milestones: (a) pre-commencement: full refund minus administrative processing fee of 5%, (b) during Phase 1 (Audit & Architecture): refund of 75% of remaining project value, (c) during Phase 2 (Pipeline Configuration): refund of 50% of remaining project value, (d) during Phase 3 (Platform Build): refund of 25% of remaining project value, (e) post-Phase 3: no refund available as deliverables have been substantially provided.
3. Recurring Services. Monthly retainer and subscription-based services may be cancelled with 30 days written notice. A prorated refund for the unused portion of the current billing period will be issued. No refund is available for partial months already invoiced and paid.
4. Non-Refundable Items. The following are not eligible for refund: (a) domain name registrations and renewals, (b) third-party software licenses procured on behalf of the client, (c) cloud infrastructure costs already incurred and consumed, and (d) consulting hours already delivered.
5. Refund Processing. Approved refunds are processed within 14 business days using the original payment method. coreloopdev reserves the right to issue refunds via bank transfer if the original payment method is no longer accessible. All refund requests must be submitted in writing to [email protected].
6. Dispute Resolution. Refund disputes shall be resolved through good-faith negotiation. If a resolution cannot be reached within 30 days, either party may submit the matter to mediation under the rules of the Barcelona Chamber of Commerce. Governing law is that of the Kingdom of España.
Section 04
Terms of Service
Last updated: January 2026
1. Acceptance of Terms. By engaging the services of coreloopdev, located at Carrer del Consell de Cent 310, Barcelona, Eixample, España, you agree to be bound by these Terms of Service. These terms constitute a legally binding agreement between the client and coreloopdev.
2. Service Scope. coreloopdev provides web development, cloud infrastructure, API engineering, e-commerce platform development, performance optimization, and related digital services. The specific scope, deliverables, timeline, and pricing for each engagement are defined in individual project proposals and statements of work.
3. Payment Terms. Invoices are issued according to the payment schedule defined in the project agreement. Payment is due within 14 days of invoice date unless otherwise specified. Late payments incur a statutory interest rate of 4% per annum plus applicable recovery costs as permitted under EU Directive 2011/7/EU on late payment in commercial transactions.
4. Intellectual Property. Upon full payment, all deliverables produced specifically for the client under a project agreement become the exclusive intellectual property of the client. coreloopdev retains ownership of pre-existing tools, frameworks, methodologies, and general-purpose code libraries used in service delivery. coreloopdev reserves the right to reference completed projects in marketing materials unless explicitly prohibited in writing.
5. Confidentiality. Both parties agree to maintain the confidentiality of proprietary information shared during the course of engagement. This obligation survives the termination of the service agreement for a period of 3 years. Confidential information includes but is not limited to: business strategies, technical architectures, source code, database schemas, and internal processes.
6. Limitation of Liability. coreloopdev's total aggregate liability under any engagement shall not exceed the total fees paid by the client for the specific project giving rise to the claim. coreloopdev shall not be liable for indirect, consequential, or incidental damages including but not limited to loss of revenue, data loss, or business interruption.
7. Service Availability. coreloopdev commits to maintaining service availability in accordance with agreed SLA terms. Scheduled maintenance windows are communicated with minimum 48 hours notice. coreloopdev is not liable for downtime caused by force majeure events, third-party infrastructure failures, or client-initiated configuration changes.
8. Termination. Either party may terminate a service agreement with 30 days written notice. Upon termination, the client is responsible for payment of all work completed up to the termination date. All deliverables completed and paid for shall be transferred to the client upon termination.
9. Governing Law. These Terms of Service are governed by the laws of the Kingdom of España. Any disputes arising from or in connection with these terms shall be submitted to the exclusive jurisdiction of the courts of Barcelona, España.
10. Amendments. coreloopdev reserves the right to amend these Terms of Service at any time. Material changes will be communicated via email to active clients at least 30 days prior to taking effect. Continued engagement following the effective date constitutes acceptance of the amended terms.