Privacy Policy

The person responsible for the processing of personal data collected on this platform is:

All Clean Miami INC legally operates under the registered business name Profalia in accordance with applicable data protection laws.

We collect the following types of personal data:

• Identification data: Name and surname, DNI/NIE, date of birth, profile photograph.
• Contact details: Email address, phone number, postal address.
• Professional details: Sector of activity, membership number (if applicable), experience, training, certifications.
• Navigation data: IP address, browser type, pages visited, time spent, device used.
• Financial data: Bank details necessary for the collection of subscriptions and payments, processed through secure payment gateways.

We process your personal data for the following purposes:

• Manage user registration and authentication on the platform.
• Facilitate the connection between users who request services and professionals who offer them.
• Send notifications related to quote requests, messages and service updates.
• Manage billing, collections and payments of subscriptions and contracted services.
• Send commercial and promotional communications, with prior express consent of the user.
• Improve the platform, perform statistical analysis and market studies.
• Comply with applicable legal obligations.

The processing of your personal data is based on the following legal bases, in accordance with article 6 of the RGPD:

• Consent (art. 6.1.a): For sending commercial communications, the use of non-essential cookies and the publication of reviews.
• Contractual execution (art. 6.1.b): For the provision of the requested services, budget management and the contractual relationship.
• Legal obligation (art. 6.1.c): For compliance with tax, accounting and legal obligations.
• Legitimate interests (art. 6.1.f): For the improvement of the service, the prevention of fraud and the analysis of platform use.

Your personal data will not be transferred to third parties, except in the following cases:

• Service providers: Hosting companies, payment gateways, email services and analytical tools that act as data processors under a confidentiality agreement.
• Registered professionals: The contact information for service requests will be visible to professionals who acquire the corresponding lead.
• Public authorities: When required by current legislation or by judicial or administrative resolution.

In accordance with articles 15 to 22 of the GDPR and applicable European legislation in any of the 7 supported languages, you have the right to:

Likewise, you have the right to file a claim with the supervisory authority of your country of residence in the EU or with the Spanish Data Protection Agency (AEPD, www.aepd.es).

Personal data will be kept for the time necessary to fulfill the purpose for which it was collected:

• Account details: As long as the user keeps the account active and up to 3 years after their last activity.
• Contractual data and billing: During the legal conservation period of 6 years in accordance with tax and commercial regulations.
• Navigation data: Up to 2 years from collection, except legal obligation of higher conservation.
• Consents: Until the revocation of consent by the interested party.

Profalia adopts the necessary technical and organizational measures to guarantee the security of personal data and prevent its alteration, loss, processing or unauthorized access, in accordance with the provisions of article 32 of the RGPD.

Measures implemented include:

• Communications encryption using HTTPS/TLS protocol.
• Storing passwords with cryptographic hashing (bcrypt).
• Role-based access control and multi-factor authentication.
• Periodic encrypted backups and disaster recovery plan.
• Periodic security audits and penetration tests.

In accordance with article 22.2 of the LSSICE and the guidelines of the European Data Protection Committee (CEPD), Profalia implements a prior and granular consent management system through an interactive floating banner (Google Consent Mode v2).

Technical classification of cookies used:

• Technical and Functional Cookies (Strictly Necessary):

  Essential for authenticating users using cryptographic JWT tokens with HttpOnly and SameSite attributes (`accessToken`, `refreshToken`, `adminAccessToken`), preventing cross-site request forgery (`csrf-token`) and remembering your selected language (`NEXT_LOCALE`). They do not require prior consent and cannot be deactivated.

• Geolocation Cookies (Optional):

  They store your preference to show professionals or requests close to your zip code or approximate coordinates (`consent_location`, `profalia_consent`). They are only activated if you give express consent.

• Analytical and Performance Cookies (Optional - Google Analytics 4):

  They allow us to measure visits, dwell time and conversion funnels (`_ga`, `_ga_*`) in an aggregated and anonymous way. They remain blocked by default until you click “Accept all” or enable the Analytics box in the cookie configurator.

You can modify your consent at any time by controlling the cookie settings in the footer. To revoke analytics consent, you can also delete the `profalia_consent` cookie in your browser's privacy settings; Scans will be disabled even if an old preference remains in local storage.

Profalia reserves the right to modify this Privacy Policy at any time to adapt it to new legislation, jurisprudence or criteria of the Spanish Data Protection Agency, as well as changes to the platform.

In the event that substantial changes occur, we will notify you through the platform or by email sufficiently in advance of their entry into force. The date of the last update is indicated at the beginning of this document.

Continued use of the platform after the publication of the modifications implies acceptance of the updated policy.