Privacy Policy

Last updated: 27 August 2026

This Privacy Policy explains how Neurotrack (“Neurotrack”, “we”, “us” or “our”) collects, uses, stores and protects personal data when you visit neurotrack.tech and its language versions (ua.neurotrack.tech, neurotrack.uk, neurotrack.es, neurotrack.pl, neurotrack.pt) (together, the “Website”), contact us, or use our services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection law.

1. Data controller

The data controller responsible for your personal data is:

Neurotrack
Carrer de Salamanca 46, Oficina 4, Valencia, Spain
Email: [email protected]

2. What data we collect

We may collect the following categories of personal data:

  • Contact details you provide — name, email address, phone number, company name, job title and the content of your message when you fill in a contact or request form, book a call, subscribe to updates, or write to us by email or messenger.
  • Business information — details about your company, project or requirements that you share with us in order to receive a proposal or consultation.
  • Technical and usage data — IP address, browser type and version, device type, operating system, language, referring URL, pages visited, time spent on pages, and other statistics collected automatically through cookies and similar technologies.
  • Marketing and advertising data — information about how you interact with our advertisements and content on third-party platforms (for example Meta, TikTok, Google), collected through pixels and tags described in Section 5.
  • Communication records — correspondence between you and Neurotrack, including emails, chat messages and call notes.

We do not intentionally collect special categories of personal data (such as health, political or religious data). Please do not send us such data unless it is necessary for a specific project and a separate agreement is in place.

3. How and why we use your data

Purpose Legal basis (GDPR Art. 6)
Responding to your enquiries, preparing proposals and estimates Pre-contractual steps at your request (Art. 6(1)(b)); legitimate interest (Art. 6(1)(f))
Providing our services and managing our contractual relationship Performance of a contract (Art. 6(1)(b))
Operating, securing and improving the Website Legitimate interest (Art. 6(1)(f))
Web analytics and audience measurement Consent (Art. 6(1)(a)) where required; otherwise legitimate interest
Advertising, remarketing and measuring campaign performance on third-party platforms Consent (Art. 6(1)(a))
Sending newsletters and marketing communications Consent (Art. 6(1)(a)); you may unsubscribe at any time
Complying with legal obligations (accounting, tax, responding to lawful requests) Legal obligation (Art. 6(1)(c))
Establishing, exercising or defending legal claims Legitimate interest (Art. 6(1)(f))

4. How long we keep your data

  • Enquiries and pre-sales correspondence — up to 24 months after our last contact, unless a contract is concluded.
  • Contract and billing data — for the duration of the contract and thereafter for the period required by applicable accounting and tax law (generally 6 years in Spain).
  • Analytics and advertising data — in accordance with the retention settings of the respective tool (typically 2–26 months) or until you withdraw consent.
  • Marketing subscriptions — until you unsubscribe or withdraw consent.

When data is no longer needed, we delete or anonymise it.

5. Cookies, pixels and similar technologies

Our Website uses cookies and similar technologies. Some are strictly necessary for the Website to function; others are used for analytics and advertising and are set only with your consent where the law requires it. The tools we use may include:

  • Google Analytics / Google Tag (Google Ireland Ltd.) — audience measurement and website statistics.
  • Meta Pixel (Meta Platforms Ireland Ltd.) — measuring the effectiveness of Facebook and Instagram advertising and building audiences.
  • TikTok Pixel / TikTok Events (TikTok Technology Ltd.) — measuring the effectiveness of TikTok advertising and building audiences.
  • Cloudflare — security, bot protection and performance (strictly necessary).

You can manage or withdraw your consent at any time through your browser settings or the cookie preferences on the Website. Disabling cookies may affect some functions of the Website. You can also opt out of interest-based advertising directly in your Google, Meta and TikTok account settings.

6. Who we share your data with

We do not sell your personal data. We may share it with:

  • Service providers acting on our behalf — hosting and infrastructure providers, email and messaging providers, CRM and form-processing tools, analytics and advertising platforms (Google, Meta, TikTok), and payment providers. These providers are bound by data processing agreements and may process data only on our instructions.
  • Professional advisers — lawyers, accountants and auditors, where necessary.
  • Public authorities — where required by law, court order or to protect our rights.
  • Successors — in the event of a merger, acquisition or sale of assets, subject to this Privacy Policy.

7. International transfers

Some of our service providers are located outside the European Economic Area (for example in the United States, United Kingdom or Ukraine). Where this is the case, we ensure an adequate level of protection through European Commission adequacy decisions, Standard Contractual Clauses, or other safeguards permitted under GDPR Chapter V.

8. Your rights

Under the GDPR you have the right to:

  • access your personal data and obtain a copy of it;
  • request rectification of inaccurate or incomplete data;
  • request erasure of your data (“right to be forgotten”);
  • request restriction of processing;
  • receive your data in a portable format;
  • object to processing based on legitimate interest, including profiling, and to direct marketing at any time;
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
  • lodge a complaint with a supervisory authority — in Spain, the Agencia Española de Protección de Datos (www.aepd.es), or the authority of your country of residence.

To exercise your rights, email us at [email protected]. We will respond within one month; we may ask you to verify your identity before acting on your request.

9. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, including encrypted connections (HTTPS), access controls, and regular review of our systems. No method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.

10. Children

Our Website and services are intended for businesses and professionals. We do not knowingly collect personal data from persons under 16 years of age. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Third-party websites

The Website may contain links to third-party websites and social media platforms (LinkedIn, Facebook, Instagram, TikTok, YouTube, Telegram, etc.). We are not responsible for the privacy practices of those third parties and encourage you to read their privacy policies.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the date of the last update shown at the top. Material changes will be communicated on the Website or by email where appropriate.

13. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Neurotrack
Carrer de Salamanca 46, Oficina 4, Valencia, Spain
Email: [email protected]