Last updated: 18 October 2026
Who is responsible for your information?
Career Coaching by ARLee Consulting is operated by LEE CORP 2018 S.L., the data controller for the website and enquiries described in this policy. Alex Ruiz Lee handles enquiries personally.
For privacy questions or requests, email [email protected].
What information do we collect?
When you send an enquiry, we receive your name, email address, chosen service, message and acknowledgement of this policy. You can optionally provide your career stage, job-search situation, referral source, country, phone number, LinkedIn URL and target role or employer.
Our hosting and security providers also process technical information, such as IP addresses, request times, browser information and pages requested, to deliver and protect the website. If you accept analytics, Google receives technical and usage information as described below.
Please do not include passwords, identity documents, health information or other sensitive information in your initial enquiry. We do not ask for them through the contact form.
Why do we use your information?
- Enquiries about potential services: to answer your request and take steps before entering into a contract (GDPR Article 6(1)(b)). Other correspondence is handled under our legitimate interest in responding to people who contact us (Article 6(1)(f)).
- Agreed coaching services: to perform our contract with you (Article 6(1)(b)). Additional information about data handling relevant to an engagement is provided where needed before it begins.
- Website and contact-form security: our legitimate interest in preventing spam and abuse and maintaining a reliable service (Article 6(1)(f)).
- Optional website analytics: your consent (Article 6(1)(a)). You can refuse or withdraw it through Cookie Settings.
- Required business records: compliance with applicable legal obligations (Article 6(1)(c)).
Sending an enquiry triggers an acknowledgement email and allows us to reply about your request. It does not subscribe you to marketing. The privacy acknowledgement confirms that you have received this information; it is not consent to unrelated advertising.
Google Analytics
With your permission, we use Google Analytics 4 to understand which pages attract interest, how visitors reach the site and whether a visit results in a successfully submitted enquiry. Analytics may process information such as online identifiers, browser and device characteristics, approximate location, page visits, referring websites and campaign information.
Our Google tag loads only after analytics consent. Advertising storage, advertising user-data sharing and personalised-advertising consent remain denied. Google Signals and advertising-personalisation signals are disabled in our website configuration. Google Ads conversion tags and Zendesk live chat are not currently installed.
We do not send your name, email address, phone number or message content to Analytics. The successful-enquiry event identifies the form, not the person or their answers. Our page tracking removes URL fragments and non-campaign query parameters.
Google's processing is explained in its Privacy Policy and information about data from partner sites. Analytics is optional: refusing it does not affect the contact form or coaching services.
Country suggestion
Cloudflare supplies an approximate country code based on your internet connection. The contact form uses this code to suggest a country and phone prefix. This is not precise GPS location. You can change it or choose “Prefer Not to Say”. The same-site country endpoint returns only a country code.
Cloudflare and Turnstile
Cloudflare delivers and protects this website. On the contact page, Cloudflare Turnstile processes technical signals such as IP address, browser information, TLS connection characteristics and website origin to help distinguish people from bots. Our server validates the resulting token before sending the enquiry.
Cloudflare processes security signals on our behalf and also acts as a separate controller when using signals to improve its bot-detection service. Read the Turnstile Privacy Addendum and Cloudflare Privacy Policy. If you cannot use Turnstile, you can email Alex directly.
Who receives the information?
Alex receives enquiries in the business email inbox. Hosting and email providers process the information needed to operate the website and deliver correspondence; the site is hosted through phpwebhosting.com. Cloudflare provides website delivery and security. Google receives analytics data only when you allow analytics. Professional advisers and authorities may receive relevant information where required for legal obligations or claims.
We do not sell enquiry information. Clicking links to LinkedIn, WhatsApp or other websites takes you to separate services with their own privacy practices. These services are not embedded as social feeds or chat widgets on this site.
International processing
The website uses US hosting infrastructure and international services from Cloudflare and, with consent, Google. Information may therefore be processed outside the European Economic Area. International transfers require an applicable lawful mechanism, such as an adequacy decision or appropriate contractual safeguards. You can request information about the provider arrangements and relevant safeguards by emailing us.
Retention
We keep enquiry correspondence while dealing with your request and, if you become a client, while providing and administering the agreed services. Subsequent retention depends on follow-up you request, applicable accounting and legal duties, and the need to establish, exercise or defend legal claims. Information that is no longer needed for those purposes is deleted or anonymised.
The website remembers your cookie choice for up to six months. Analytics cookies are configured for a maximum of 395 days without extending their expiry on each visit. Google's separate retention settings govern stored analytics data; aggregated reports can be retained differently from user-level and event-level records.
Contact-form rate-limit files contain a hashed network address and submission timestamps, not message content. The limit considers the previous hour; this calculation window is not a promise that the underlying temporary file is immediately deleted. Session data, server logs and provider security records follow their respective operational retention settings.
Your rights and choices
You may request access, correction, erasure or restriction of your information, and portability where applicable. You can object to processing based on legitimate interests. You can withdraw analytics consent at any time using the Cookie Settings link in the footer, without affecting the lawfulness of earlier processing.
Email [email protected] to exercise your rights. We may request proportionate information to verify your identity. We normally respond within one month; we will explain any lawful extension.
You may complain to the Spanish Data Protection Agency (AEPD) or your competent supervisory authority.
Automated checks and cookies
We do not use automated decisions to assess your career prospects or eligibility for coaching. Automated security checks can reject a suspected bot submission; direct email remains available. See our Cookie Policy for browser technologies and consent controls.
Updates
We will update this policy when the website or its data handling changes and show the revision date above.