Legal

Privacy Policy

Last updated: April 2026

Who we are

This website is operated by Leonard James Toal, a Creative Director based in Barcelona, Spain. References to "I", "me", or "my" in this policy refer to Leonard James Toal, the data controller for this website.

If you have any questions about this policy or how your data is handled, you can reach me via the contact form on this site

What data I collect and why

I only collect personal data when you voluntarily submit the contact form on this site. The fields I collect are:

  • First name and surname
  • Company name (optional)
  • Email address
  • Phone number (optional)
  • LinkedIn and/or Instagram profile links (optional)
  • Your message
  • Your declared reason for getting in touch (e.g. agency, brand, creative)

This data is collected solely for the purpose of responding to your enquiry. I do not use it for marketing, profiling, or any other purpose without your explicit consent.

Legal basis for processing

Under the General Data Protection Regulation (GDPR), the legal basis for processing your personal data is your consent (Article 6(1)(a)). You give this consent by ticking the checkbox in the contact form before submitting.

You can withdraw your consent at any time by contacting me and requesting deletion of your data. Withdrawal does not affect the lawfulness of any processing carried out before you withdrew consent.

How your data is stored and processed

Form submissions are processed by Formspree (formspree.io), a third-party form handling service. Formspree receives your submitted data and forwards it to my email inbox. Formspree may temporarily store submission data on their servers in accordance with their own privacy policy, which you can review at formspree.io/legal/privacy-policy.

Once received in my inbox, your data is stored only as long as necessary to respond to and complete your enquiry, or as required by applicable law.

Your email address and personal details are never published, sold, shared with third parties for marketing purposes, or used for any purpose other than responding to your message.

Third-party services on this site

This site uses the following third-party services, which may process limited technical data (such as your IP address) when you visit:

  • Google Fonts — serves the Figtree typeface used on this site. Google may log your IP address when loading fonts. See Google's Privacy Policy.
  • Vimeo — hosts the showreel video embedded on the homepage. Vimeo uses a privacy-enhanced embed (dnt=1) to limit tracking. See Vimeo's Privacy Policy.
  • Formspree — processes contact form submissions as described above.

This site does not use cookies, tracking pixels, analytics scripts, or any advertising technology of its own.

Your rights under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

  • Right of access — you can request a copy of the personal data I hold about you.
  • Right to rectification — you can ask me to correct inaccurate data.
  • Right to erasure — you can ask me to delete your personal data.
  • Right to restriction — you can ask me to limit how I process your data.
  • Right to data portability — you can request your data in a structured, machine-readable format.
  • Right to object — you can object to the processing of your personal data.

To exercise any of these rights, please get in touch. I will respond within 30 days.

You also have the right to lodge a complaint with the relevant supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

Data retention

I retain your personal data only for as long as is necessary to fulfil the purpose for which it was collected — typically the duration of our correspondence and any related professional engagement. Once no longer needed, data is deleted from my inbox and any local records.

Children's privacy

This site is not directed at children under the age of 16. I do not knowingly collect personal data from anyone under 16. If you believe a minor has submitted data through this site, please contact me and I will delete it promptly.

Changes to this policy

I may update this Privacy Policy from time to time. When I do, I will revise the "Last updated" date at the top of this page. Continued use of this site after any changes constitutes acceptance of the updated policy.

Contact

For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact:

Leonard James Toal
Barcelona, Spain
Get in touch