Privacy Policy

NIE Experts Spain
A service operated by NBU Advisory LLC
Last updated: June 14, 2026


1. Introduction

NBU Advisory LLC, operating as NIE Experts Spain ("we," "us," "our"), is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have under the General Data Protection Regulation (GDPR) and other applicable data protection laws.

This policy applies to all users of our website and services, regardless of location.


2. Data Controller

The data controller responsible for your personal data is:

NBU Advisory LLC
State of Wyoming, United States
Email: admin@nieexpertsspain.com


3. Data We Collect

We collect only the data necessary to provide our services and to comply with legal obligations:

Data you provide directly:

Data we collect automatically:

Data we receive from third parties:

We do not ask you to upload copies or photographs of your identity documents. The documents required for your NIE appointment remain in your possession at all times; we only collect the information needed to complete the official application forms.


4. How We Use Your Data

We use your data only for the following legitimate purposes:

Service delivery: to provide the services you purchased, including preparing your application materials, delivering guides and instructions, and providing personalized support.

Communication: to send transactional emails (order confirmations, service updates) and to respond to your inquiries, including through our WhatsApp support channel.

Legal compliance: to meet our tax, accounting, and regulatory obligations.

Service improvement: to analyze anonymized usage data and improve our content.

We do not sell your data to third parties. We do not use your data for advertising purposes without your explicit consent.


5. Legal Basis for Processing (GDPR)

We rely on the following legal bases under GDPR Article 6:

Contract (Art. 6.1.b): processing is necessary to perform the service you purchased.

Legal obligation (Art. 6.1.c): processing is necessary for tax, accounting, and regulatory compliance.

Legitimate interest (Art. 6.1.f): for security, fraud prevention, and service improvement.

Consent (Art. 6.1.a): for marketing communications, analytics, and any optional cookies. Consent can be withdrawn at any time.


6. Data Sharing and Third-Party Processors

We share your data only with third-party service providers strictly necessary to operate our service. All providers are bound by data processing agreements and appropriate safeguards:

Stripe (payments) — processes payment data. Stripe is GDPR-compliant and uses Standard Contractual Clauses for EU-US data transfers.

Resend (transactional emails) — processes email addresses and the content of order confirmations and service emails. Resend operates servers in EU regions for European customers.

Supabase (database infrastructure) — securely stores the service data required to manage your order and prepare your application materials. Access is restricted to authorized personnel and automated systems strictly necessary for service delivery.

Notion (internal client management) — we use Notion as an internal system to coordinate your order and service delivery. Only authorized personnel of NBU Advisory LLC have access.

Google Workspace (email and document management) — we use Google Workspace for internal email correspondence and for storing the application materials we prepare for you.

WhatsApp / Meta (customer support) — if you choose to contact us via WhatsApp, Meta processes your messages according to its own privacy policy. Our WhatsApp support channel is partially operated through an automated assistant (see Section 7 below).

Vercel (website hosting) — provides infrastructure for our website. Anonymized server logs may be retained for security purposes.

We do not transfer your data to any third party not listed above without your explicit consent or unless required by law.


7. Automated Support Assistant

Our WhatsApp support channel is partially operated through an automated conversational assistant powered by artificial intelligence. This assistant helps answer common questions, guide you through the service, and coordinate your support requests.

The assistant processes the content of the messages you send through WhatsApp solely to provide relevant support and to deliver the service you purchased. When a request requires human judgment, your conversation is handled by a member of our team.

The use of this assistant does not produce legal or similarly significant effects about you through solely automated means. You can always request human assistance at any point during a conversation.


8. Data Retention

We retain your personal data only for as long as necessary:

Service data (the information used to prepare your application materials, and the materials themselves): retained for 60 days after purchase, then automatically deleted from our active systems. This window covers the typical duration of the NIE process from purchase to appointment.

Contact and communication data (name, email, support correspondence): retained for up to 12 months after the completion of your service for support continuity, then deleted or anonymized.

Accounting and tax data (payment records, invoices): retained for the period required by applicable tax regulations, generally up to 7 years.

Anonymized analytics data: may be retained indefinitely for trend analysis.

You may request earlier deletion of your data at any time (see Section 9).


9. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of access: request a copy of the data we hold about you.

Right to rectification: request correction of inaccurate or incomplete data.

Right to erasure ("right to be forgotten"): request deletion of your data, subject to legal retention obligations.

Right to restriction: request limitation of how we process your data.

Right to data portability: receive your data in a structured, machine-readable format.

Right to object: object to processing based on legitimate interests or for direct marketing.

Right to withdraw consent: at any time, for any processing based on consent.

Rights related to automated decision-making: you have the right to request human intervention regarding our automated support assistant at any time.

Right to lodge a complaint: with your local data protection authority. For clients in Italy, this is the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it). For clients in Spain, this is the Agencia Española de Protección de Datos (www.aepd.es).

To exercise any of these rights, contact us at admin@nieexpertsspain.com. We will respond within 30 days.


10. Cookies

Our website uses cookies and similar technologies to improve your experience and analyze website traffic.

Strictly necessary cookies: required for the website to function properly. Cannot be disabled.

Analytics cookies: used to understand how visitors interact with our website. These are only placed with your consent.

Marketing cookies: used to deliver relevant advertising. These are only placed with your explicit consent.

You can manage your cookie preferences through the cookie banner displayed on our website, or through your browser settings.


11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit (HTTPS/TLS).

Access controls limiting who within our organization can view your data.

Secure storage of data in encrypted cloud environments.

Automated deletion of service data after the retention window described in Section 8.

Regular review of our security practices.

While we take reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.


12. Children's Data

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.


13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a new "Last updated" date.

We encourage you to review this policy periodically.


14. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at:

NBU Advisory LLC (operating as NIE Experts Spain)
Email: admin@nieexpertsspain.com
Website: https://nieexpertsspain.com