Privacy Policy

1. Who We Are

goBOFU is a content agency operated from the Canary Islands, Spain. We build bottom-of-funnel content for SaaS companies. For the purposes of GDPR and LOPDGDD, goBOFU is the data controller of your personal data.

We are not required to appoint a Data Protection Officer (DPO) under current regulations, but all privacy-related queries can be directed to our contact page.

2. What We Collect

We keep data collection to a minimum. Here is what we may collect:

• Booking information — When you schedule a call through Cal.com, we receive your name, email address, and any details you provide in the booking form. Cal.com processes this data on our behalf as a data processor.
• Email correspondence — When you email us, we store your messages and contact details in order to respond and manage our business relationship.
• Analytics data — We use Ahrefs Analytics, which collects anonymous, aggregated usage data without cookies or personal identifiers. No personally identifiable information is collected through analytics.

3. How We Use Your Data

We use your data to:

• Respond to inquiries and schedule calls
• Deliver and manage our services
• Send project-related communications
• Understand how visitors use the website (anonymised, aggregated analytics only)

We do not send marketing emails without your prior opt-in. We do not sell or share your data with third parties for their own marketing purposes.

4. Legal Basis (GDPR)

We process personal data on the following legal bases under Article 6 GDPR:

• Legitimate interest (Art. 6(1)(f)) — to respond to inquiries and manage business relationships
• Contract performance (Art. 6(1)(b)) — to deliver services you have engaged us for
• Consent (Art. 6(1)(a)) — where explicitly given, such as opting into communications

5. Cookies

We do not use cookies on this website. Ahrefs Analytics is cookie-free and does not track individual visitors. Cal.com booking opens in a separate tab on Cal.com's own domain and does not set any cookies on gobofu.com.

6. Third-Party Services

We use the following third-party processors, each selected for their commitment to data protection:

• Cal.com — scheduling and booking. We use Cal.com's EU-hosted instance (cal.eu), so your booking data remains within the European Economic Area.
• Ahrefs Analytics — cookie-free, anonymous website analytics. No personal data is transferred through this service.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by applicable law:

• Booking and correspondence data — retained for the duration of the business relationship and for up to 3 years afterward.
• Project-related data — retained for the duration of the engagement and for up to 5 years afterward, in line with Spanish commercial law obligations.

Once data is no longer required, we delete or anonymise it. You may request earlier deletion, subject to any overriding legal obligations.

8. Your Rights (GDPR / LOPDGDD)

Under GDPR and the Spanish Data Protection Act (LOPDGDD), you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data where there is no legitimate reason for us to continue processing it
• Restriction — ask us to restrict processing in certain circumstances
• Objection — object to processing based on legitimate interests
• Portability — receive your data in a structured, commonly used, machine-readable format

To exercise any of these rights, contact us. We will respond within one calendar month.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) at www.aepd.es.

9. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.

10. Contact

For any privacy-related questions, requests, or concerns, please contact us.