displace.store privacy policy
Last updated: 5 September 2026
This privacy policy explains how displace.store (referred to as "displace.store," "we", "us", or "our"), a studio of Displace Agency, as a controller, collects, uses and protects personal data collected from each visitor (“you”). This privacy policy applies to our website and your further interaction with displace.store.
It also describes your data protection rights. More information about your rights, and how to exercise them, is set out in Section 7.
1. Personal Data We May Collect About You
Personal data we receive directly from you
| Contact details | Name, email address and company name, submitted through our contact form |
| Project details | Store URL, selected store ideas, starting point and message, submitted through our contact form |
| Booking data | Name, email address and the time slot you choose when you book a call through Cal.com |
| Email reply request | Email address, if you ask us to reply through the footer form |
| Analytics & Marketing Data* | When optional analytics is enabled, pages viewed, device and browser type, collected through Google Analytics 4. Analytics cookies are used only after you accept them. Before that choice, Google may receive limited consent and cookieless measurement signals. |
| Technical Information* | IP address and request data, collected by our hosting provider, Vercel, for security purposes |
| Communication Information | Necessary, functional and analytics cookies, described in Section 4. Ideas you expressly save to your store plan are stored in this browser tab for the session. This stores only the selected idea identifiers, not your contact details or written enquiry. They are sent to us when you submit the contact form. |
With regard to categories with a (*) these data may be collected by means of cookies or similar technologies, and only with your consent. For such processing, please also see more details in Section 4.
Personal data we receive indirectly from you
Sometimes we also receive information about you from third parties. In particular:
- Cal.com, when you book a call through their booking page.
- Google, through optional Google Analytics 4 and Google Tag Manager. Analytics cookies are used only once you accept them.
We do not intentionally collect sensitive personal data unless required and permitted by law.
2. How We Use Your Personal Data And The Legal Basis For This Use
We use the information identified in Section 1 for the purposes and legal bases identified below and share this data only with the data recipients identified below.
| Purpose | Categories of personal data | Legal basis | Data recipient(s) |
|---|---|---|---|
| To respond to your contact form message. | Contact details, project details | We have a legitimate interest in responding to inquiries about our services. | Email service provider, Resend, and Google Workspace for our team's email. |
| To book and manage a call with you. | Booking data | It is necessary to perform steps you request before entering into a contract with us. | Booking platform, Cal.com. |
| To reply when you ask us to email you. | Email reply request | We have a legitimate interest in responding to the request you make. | Email service provider, Resend, and Google Workspace for our team's email. |
| To understand and improve how visitors use our site. | Analytics data | Your consent, given through our cookie notice. | Google, through Google Analytics 4 and Google Tag Manager. |
| To host and secure our website. | Server logs | We have a legitimate interest in keeping our website secure and available. | Hosting provider, Vercel. |
| To operate the cookie notice and remember your choice. | Cookie data | We have a legitimate interest in respecting the choice you make, and a legal obligation for necessary cookies. | Hosting provider, Vercel, which serves the cookie notice. |
| To manage our own business email and Workspace tools. | Contact details | We have a legitimate interest in running our business communications. | Google Workspace. |
| To comply with applicable laws and protect our legitimate business interests and legal rights. | Contact details, project details, booking data, server logs | We have a legitimate interest in preventing and detecting fraud or other wrongdoing. We may also have a legal obligation under applicable law. | Courts, law enforcement authorities, regulators and legal advisors, depending on the specific case. |
| To add advertising tags in the future, if we choose to. | Analytics data | Your consent, given through our cookie notice, before any such tag is active. | No advertising tags are active today. Any future tag will sit behind the same consent as our analytics cookies. |
There are instances where we rely on a legitimate interest to use your data. Where we do, we have considered the impact of the processing on you and concluded that our interest does not override your rights. You can ask for more detail about this assessment using the contact details at the end of this policy.
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals.
3. Email Communications & And Your Choices
3.1 Replies To Enquiries
When you contact us or ask us to email you, we use your email address to respond to that request. We do not treat a reply request as consent to marketing.
- Replies identify displace.store and use accurate sender information.
- We use the information only to understand and answer your enquiry.
- Our team receives the request at its business email address.
- You can ask us to stop corresponding with you at any time.
- We keep the request only for as long as needed under this policy.
To exercise your rights, including requests to access, correct, or delete personal data, you may contact us using the details listed in Section 13.
3.2 No Newsletter Signup
This website does not currently offer a newsletter subscription or add footer form submissions to a marketing list.
- The footer form asks only for an email address so we can reply.
- Submitting the footer form does not enroll you in updates.
- We do not share the address with a newsletter platform.
If we introduce a newsletter later, we will present a separate opt-in and update this policy before collecting subscriptions.
3.3 Marketing Choices & And Consent
We do not use a contact or reply request as permission to send marketing. If we offer optional marketing communications, we will rely on a separate choice where required.
- Marketing consent is separate from a request for a reply.
- You may withdraw any marketing consent at any time.
You may object to direct marketing at any time by contacting us.
To exercise your rights, including requests to access, correct, or delete personal data, you may contact us using the details listed in Section 13.
4. Cookies And Tracking Technologies
4.1 What are cookies?
A cookie is a small file that is placed in the browser files of your computer, smartphone, tablet or similar device. Cookies are used to collect information for various purposes. For example, we use cookies to remember your consent choice and, once you accept them, to help us understand how visitors use our website.
4.2 What cookies do we use, what information to they collect and how long are they stored for?
You can find more information about the cookie categories we use and the purposes for which we use them in the table below:
| Type of cookie | What does it collect | Duration until expiry |
|---|---|---|
| Necessary/ essential cookies | These cookies are required for the core functioning of our website, such as remembering your cookie and market choices, and cannot be switched off. Without them, some parts of the site may not work correctly. You cannot deselect these cookies if you wish to use our website. | Up to 12 months |
| Analytics/ performance cookies | These cookies are set by Google Analytics 4, loaded through Google Tag Manager, only after you accept them in our cookie notice. Before acceptance, Google tags may send limited cookieless measurements and consent signals. They do not read or write analytics cookies while analytics consent is denied. | Up to 14 months, matching Google's retention setting |
| Functional cookies | We may use cookies that are not essential but enable other helpful features. We ask for your consent to use these cookies, and you can withdraw your consent at any time by changing the settings in the cookie notice. | Up to 12 months |
4.3 Third-Party Cookies
We use first- and third-party cookies. First party cookies come from us and send information only to us. Third-party cookies are placed by Google and send information about your device to Google to analyze how you are using our website.
When optional analytics is configured, we use Google Analytics 4, loaded through Google Tag Manager, to support website analytics. Google tags may receive limited cookieless measurements and consent signals while analytics consent is denied. Full analytics measurement and analytics cookies begin only after you accept analytics cookies in our cookie notice.
If the information collected on our behalf by Google contains any personally identifiable information, we protect it in accordance with this privacy policy.
You should review Google's own privacy and cookie policies to find out how they use cookies. You can change or withdraw your cookie choice at any time with the Cookie settings control in the site footer.
5. Where We Transfer Your Personal Data
Because our processors operate internationally, your personal data may be transferred to recipients located outside the UK and the EEA, in particular to the United States, where Vercel, Google, Resend and Cal.com may process data. Where such transfers are made, we rely on the EU-US Data Privacy Framework where the processor is certified, or on Standard Contractual Clauses (SCCs) to protect your personal data.
A copy of the relevant mechanism can be obtained for your review on request by using the contact details below.
6. Data Retention
We keep contact form and booking messages for as long as needed to answer you, and for up to three years afterwards for our business records.
We keep analytics data for the period set by Google Analytics 4's own retention setting, currently 14 months. We keep server logs for the period set by our hosting provider, Vercel.
If you would like to receive any further information about our data retention periods, please contact us via the details set out in Section 13.
7. Your Rights
Depending on your location, you may have the following rights:
| Right | Summary |
|---|---|
| The right of access | Lets you ask for a copy of the personal data we hold about you |
| The right to rectification | Lets you correct any inaccurate or incomplete personal data we hold about you |
| The right to erasure | Lets you ask us to delete your personal data in certain circumstances |
| The right to restrict processing | Lets you ask us to pause the processing of your personal data in certain circumstances |
| The right to object | Lets you object to us processing your personal data on the basis of our legitimate interests, including for direct marketing. We will honor your objection unless we have compelling legitimate grounds or need to process the data to defend a legal claim. |
| The right to data portability | Lets you ask us to send your personal data to a third party, or to give you a copy of it, where technically feasible. |
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if we are required by law to keep information you ask us to delete.
Wherever we rely on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. We may however have other legal grounds for processing your data for other purposes, such as those set out above.
You have the right to object to direct marketing at any time. We do not currently operate a newsletter signup through this website. You can contact us using the details set out below if you have questions about marketing communications.
If you have unresolved concerns, you have the right to complain to a data protection authority. In Spain, the lead authority is the Agencia Espanola de Proteccion de Datos (AEPD).
8. California Privacy Rights
If you are a resident of California, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information.
Subject to certain limitations, California residents may have the right to:
- Request disclosure of the categories and specific pieces of personal information we collect about you
- Request deletion of personal information we have collected from you
- Request correction of inaccurate personal information
- Opt out of the sale or sharing of personal information
- Limit the use or disclosure of sensitive personal information
- Not be discriminated against for exercising privacy rights
displace.store does not sell or share personal information as defined under the CCPA/CPRA.
To exercise your California privacy rights, including requests to access, correct, or delete personal data, you may contact us using the details listed in Section 13.
You can amend your cookie preferences at any time with the Cookie settings control in the site footer.
9. Exercising Your Privacy Rights
To exercise your rights, including requests to access, correct, or delete personal data, you may contact us using the details listed in Section 13.
We may need to verify your identity before responding to your request. Verification may require confirming information associated with your message or prior interactions with us.
We will respond to valid requests within the timeframes required by applicable law.
10. How We Protect Your Personal Data
We rely on our processors' security measures, including Vercel's hosting security and Google's account security, and we limit access to personal data to the people at Displace Agency who need it to do their job.
11. Children’s Privacy
Our services are not directed to children, and we do not knowingly collect personal information from individuals under 16. If you are under the age of 16, you can use this service only in conjunction with your parent’s or guardian’s permission.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last Updated” date. We may also notify you in other ways from time to time about the processing of your personal data.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: hello@displace.agency
There is no separate phone line for privacy questions. Email is the fastest way to reach us.
Data controller:
Displace Agency, Madrid
Displace Agency is based in Madrid, Spain.
Controller: Santiago Lobo van Wersch.
Spain.
Displace Agency, Miami
Displace Agency also operates from Miami, Florida.
United States.
We do not publish a postal mailing address for either office. Contact us by email for any request that needs a written response.