Privacy Policy

1. Who is responsible

Newcomer operates Newcomer.es. Contact address: Carrer Londres, 35, 03509 Finestrat, Alacant, Spain. For privacy questions and requests, email info@newcomer.es.

2. Information we use and why

We use the information you provide to deliver the account and organisational tools you choose. This may include your email, account identifiers, language and city, information about your immigration journey and household, procedure choices, document readiness and dates, and calculator results you choose to save. Required fields are identified in the relevant form. If you do not provide information needed for a feature, that feature may not be available or its results may be incomplete.

We process account and requested planning information to provide the service you request. We use contact details and enquiry content to answer your questions or take steps you request before a service agreement. We process technical security information, including access events, IP-related information and authentication records, for our legitimate interests in preventing abuse, securing accounts and investigating incidents, subject to your rights. Where a legal obligation requires processing, that obligation is the basis. Optional processing that requires consent needs a separate choice; creating an account is not consent to marketing.

3. Sign in with Google

Google sign-in is optional. We request the OpenID Connect permissions openid, email and profile. Our current integration uses your Google account identifier and verified email address to authenticate you and link the Google identifier to your Newcomer account. It does not request access to Gmail messages, Google Drive files or your Google password. Our authentication integration does not persist OAuth access or refresh tokens.

If an account already uses the same email address, sign in using your existing method before connecting Google. Google processes your interaction with its sign-in service under its own privacy policy. You can manage access in your Google account. Revoking access there does not itself delete your Newcomer account; email us to request deletion of your Newcomer data or removal of a linked identity. Google sign-in information is used for account authentication and security, not advertising.

4. Documents, household information and sensitive data

The Documents checklist lets you record whether you have a document and its issue or expiry dates. It is not a request to upload copies. Do not send passports, health records, criminal records, bank documents or passwords through the general contact form or support email. Only add information about household members when you have authority to do so. Use the minimum information needed, especially for children. Family information is used to provide the requested household planning tools, not to market to children.

5. Contact messages and service providers

Contact-form messages are emailed to our support team; the Homepage module does not store their contents in its own database. Copies may exist in the support mailbox and email delivery services. Hostinger provides website hosting and SMTP email delivery. The website server is located in Frankfurt, Germany. Google supplies the optional sign-in service. Authorised support and technical service providers may process information needed to operate, deliver and secure the service. We may disclose information where required by law or to establish or defend legal claims.

The website server location does not mean that all email, CDN, security or Google processing takes place in Germany or the EEA. International processing is subject to the applicable provider arrangements and data-transfer requirements. Contact info@newcomer.es to ask which providers and safeguards apply to a particular processing activity.

6. Directory and other sources

Independent professionals listed in our directory are responsible for information you give them directly and provide their own privacy notices. Information submitted for a public business listing may be displayed publicly as part of that listing. If a listing concerning you is inaccurate or you want to ask about its source, contact info@newcomer.es. We will assess correction, objection or deletion requests. Public availability of information does not remove your data-protection rights.

7. How long we keep information

Our retention policy is to keep account and saved planning data while needed to provide the account you use. You can request closure and deletion by email. Our operational target is to complete deletion within 30 days of receiving a request, subject to proportionate identity checks and any information that must be retained for legal obligations or claims. We will explain any applicable exception or lawful extension; requesting deletion does not automatically erase records on submission.

Our retention periods are 12 months after closure for support enquiries and 90 days for general security logs. Short-lived authentication records can expire sooner. Automatic website backups are created daily and retained for five days. Data may remain temporarily in existing restricted backup copies until those copies expire. Retention is administered through our support and technical processes; this notice does not promise an instant or fully automated deletion feature.

8. Cookies and authentication

We use cookies needed for account security and sign-in. The form-protection cookie __Host-nc_auth_form_proof has a one-hour lifetime. The Google sign-in state cookie nc_auth_oidc_state has a maximum ten-minute lifetime and is cleared when a valid callback is processed. WordPress also uses authentication/session cookies when you sign in; their duration depends on the sign-in and session settings. Blocking necessary cookies can prevent secure forms or sign-in from working. Google may use its own cookies on its sign-in pages.

These authentication cookies do not provide consent for advertising or unrelated tracking. Any optional technology that requires consent must be presented with a separate choice before it is activated.

9. Tools and automated information

Calculators, checklists and guidance provide information and organisational support. They do not grant residence, decide public entitlements or make official legal decisions about you. Results depend on your inputs and the tool assumptions. Any future feature involving materially different personal-data processing requires appropriate information before use; this notice is not blanket permission to disclose sensitive data to AI providers.

10. Your rights

Subject to applicable conditions, you can ask for access, correction, deletion, restriction, portability or object to processing. If processing is based on consent, you can withdraw it without affecting earlier lawful processing. Email info@newcomer.es from your account email where possible and describe your request. We may request proportionate identity information; do not send identity documents unless a suitable verification process has been arranged.

We normally respond within one calendar month and explain any lawful extension. You may complain to the Spanish Data Protection Agency (AEPD), www.aepd.es, or another competent supervisory authority. You do not have to contact us before exercising your right to complain.

11. Updates

We will update this notice when the service or processing changes. Material changes will be communicated where required. Last updated: 27 October 2026.