Who this policy covers
This policy applies to visitors to en.drdelorenzo.com, the English-language professional website of Dr David de Lorenzo. A Spanish-language version is available at es.drdelorenzo.com/privacidad.html.
Data controller
The data controller for this site is Dr David de Lorenzo, operating through CESGEN SL (CIF B25759184), registered in Lleida, Spain. For any data-related enquiries, use the contact form on the main page.
What data is collected and why
Analytics — Google Analytics 4 (only with your consent). When you accept analytics cookies, Google Analytics records anonymised information about your visit: the pages you viewed, how long you spent on them, your approximate location (country and city level), and your device and browser type. Your IP address is anonymised before storage and is never retained in identifiable form. This data is used solely to understand how visitors engage with this site in order to improve it. If you decline, no analytics data is collected and no tracking cookies are set.
Contact form submissions. If you use the contact form on this site, your name, email address, message, and chosen topic are submitted to Web3Forms, a third-party form-processing service, which delivers the message to me by email. I use this information solely to respond to your enquiry. Web3Forms does not retain your data beyond what is required for message delivery.
Legal basis
- Analytics: Article 6(1)(a) GDPR — your consent. You can withdraw consent at any time by clicking "Decline" on the cookie banner or by clearing the site's localStorage data in your browser settings.
- Contact form: Article 6(1)(f) GDPR — legitimate interest in responding to your message.
Third-party processors
- Google LLC (Google Analytics 4) — analytics processing, United States, covered by the EU–US Data Privacy Framework. Google's privacy policy.
- Web3Forms — contact form delivery. Web3Forms' privacy policy.
How long data is kept
Google Analytics data is retained for 14 months (the GA4 default) before automatic deletion. Contact form submissions are kept for as long as necessary to handle your enquiry and for a reasonable period thereafter.
Cookies and local storage
This site uses cookies only if you accept analytics. Google Analytics then sets the following first-party cookies:
_ga— distinguishes unique visitors (expires after 2 years)_ga_DGH4ZRY5H5— session state (expires after 1 year)
Your consent preference ("accepted" or "declined") is stored in your browser's localStorage under the key cookie_consent. Unlike cookies, localStorage data is not sent to any server — it remains on your device only and persists until you clear your browser storage.
No cookies are set if you decline or ignore the consent banner.
Your rights
Under UK GDPR and EU GDPR you have the right to: access the personal data held about you; have inaccurate data corrected; request erasure of your data; restrict or object to processing; and data portability. To exercise any of these rights, use the contact form. You also have the right to lodge a complaint with a supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD); in the UK, the Information Commissioner's Office (ICO).
Changes to this policy
This policy may be updated periodically. The date below shows when it was last revised. Continued use of the site after an update constitutes acceptance of the revised policy.
Last updated: May 2026