Privacy policy
Last updated: 14 October 2026
This policy explains how espbulto (“we”, “us”), a parcel delivery service based in Madrid, Spain, collects and uses personal data through espbulto.com. We are the data controller for the information described below.
What we collect
- Parcel details entered by our staff when a parcel is booked: sender and receiver names, pickup and delivery addresses, and (optionally) phone numbers and email addresses.
- Tracking lookups: the tracking number you search for. You do not need an account to track a parcel.
- Chat messages: your name, the messages you send and, if you choose to give it, your email address.
- Technical data: standard server logs (such as IP address and browser type) kept by our hosting provider for security, and your approximate country, used only to choose the website language.
This website never asks for passwords, bank or card details, identity documents, or for you to download or install software. If you receive a message claiming to be from espbulto that asks for any of these, please do not respond and contact us at help@espbulto.com.
How we use it
- To deliver parcels and show their status on the tracking page.
- To email the sender and receiver when a parcel is booked, when its status changes and when it is delivered.
- To answer questions sent through the chat.
- To keep the website secure and prevent abuse.
Our legal bases are performance of the delivery service (contract), our legitimate interest in running a secure, reliable service, and your consent where you choose to give us your email in the chat.
Who we share it with
We do not sell personal data. We use trusted service providers to run the website: Vercel (hosting), Supabase (database) and Resend (sending emails). They process data only on our instructions. Some of these providers may process data outside the European Economic Area under appropriate safeguards such as the European Commission’s standard contractual clauses.
The public tracking page shows names, addresses and parcel status. It never shows phone numbers or email addresses.
Cookies and local storage
We only use what the site needs to work: a cookie that remembers your language, a secure login cookie for our staff, and your browser’s local storage to remember light/dark mode and keep your chat conversation. We do not use advertising or tracking cookies.
How long we keep it
Parcel records are kept for up to 24 months after delivery for customer service and accounting purposes, then deleted. Chat conversations are deleted after 12 months, or sooner on request.
Your rights
Under the GDPR you can ask to access, correct or delete your personal data, restrict or object to its use, and receive a copy of it. Email help@espbulto.com and we will reply within one month. You can also complain to the Spanish data protection authority (Agencia Española de Protección de Datos, aepd.es).
Contact
espbulto · Madrid, Spain · help@espbulto.com · +34 510 071 465