Privacy policy

Forms are offered exclusively to businesses, self-employed people and professionals. Consumer contracting and self-service courses are not active at this stage.

Your name, email, company or professional activity, reason, context and limited enquiry referral are processed to respond about consulting, training, publishing or collaboration. If you request a call, two time windows and the time zone are added. Files and real third-party data are not accepted.

Responding to a professional request and taking requested steps before a possible engagement are based on pre-contractual measures. Reviewing the stated corporate website is optional and requires separate permission. Legal obligations may justify retaining contractual or tax documents.

Launch enquiries are reviewed personally and are not sent to AI models. The automated Opportunity Map and testing community are paused. Any future activation requires a separate review of processing, terms and participant information.

When a form is submitted, the final page and, where relevant, a limited label for the resource or journey that led to the enquiry are retained. Answers given to tools are not stored, no browsing profile is created and no cookie is added.

Contact uses a pseudonymous SHA-256 email fingerprint valid for one minute to limit repeated submissions. A unique submission key allows the same enquiry to be retried without duplication. These keys are not used for advertising or browsing profiles.

Contact uses Sites and Cloudflare services for hosting and data, and Zoho for professional email. Public enquiries are not sent to AI analysis providers.

The intended retention period for non-converted prospects is six months (183 days) from the last recorded human interaction. Retention review covers the enquiry and its linked copies; technical checks do not renew the period. Customers and records with a contractual, training or other evidenced obligation require a separate review of purpose and duration. The sweep remains in preview until its procedure is validated and activated; it is not represented as deletion already performed.

Data submitted through forms is not sold or used to target advertising. It is accessed by the controller and the providers needed to handle the enquiry. Each provider is responsible for any international transfers it makes under the applicable legal mechanisms.

You may request access, correction, deletion, restriction or objection through the privacy contact above. You may also complain to the Spanish Data Protection Agency.

This website shows no advertising and loads no third-party advertising code. Toti Lab Studio games and apps are separate products: some may use advertising or third-party services outside this website, and the Toti Lab Studio catalogue shows the advertising status of each game and channel. This policy covers maxbonas.com and does not describe data processing inside those games.

The homepage previously loaded Google AdSense and its consent message. If you accepted or rejected that message, you can delete any cookies Google stored from your browser settings. The cookies page explains the technologies this website uses.

Our own measurement adds up page views and downloads by date and resource, without a visitor identifier, individual profile, stored IP address or open pixel. It cannot reveal who downloaded a file and respects Do Not Track and Global Privacy Control signals.

Field measurement remains inactive. If activated later, it will classify LCP, INP and CLS by date, route and category without storing raw values, metric identifiers, IP address, device or user.