Privacy Policy
Last updated: 2026-08-27
1. Who is responsible
The controller for PlanDesk account, billing, and website data is:
LOOKERO HUB S.L. (sociedad unipersonal)
Calle Paseo de Gracia 19, Planta Baja
08007 Barcelona, Spain
NIF B22726335
Email: hello@lookero.com
When you use PlanDesk to store your own customers, invoices, stock, or POS data, you (the workspace owner) are the controller of that data. LOOKERO HUB S.L. processes it on your instructions as a processor, to provide the service.
This policy is issued under:
- Regulation (EU) 2016/679 (GDPR)
- Organic Law 3/2018 (LOPDGDD)
- Law 34/2002 (LSSI-CE)
2. What we collect
Account and billing (we are controller)
- Name, email, login identifiers, and profile data
- Company and workspace details you enter (legal name, address, tax IDs)
- Subscription and payment records (processed via our payment provider)
- Support messages you send us
- Security logs (sign-in, access, errors)
Workspace content (you are controller, we are processor)
- Contacts, invoices, orders, products, stock, POS tickets, documents, and related files that you or your staff upload or create
Technical data
- IP address, browser and device data, language, and approximate location derived from IP
- Cookies and similar storage described in the Cookie Policy
We do not require you to provide more data than needed for the purpose.
3. Why we process data, and the legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Create and run your account, authenticate you, provide PlanDesk | Contract (Art. 6(1)(b)) |
| Process subscription payments | Contract (Art. 6(1)(b)) |
| Send service emails (security, billing, product notices) | Contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)) |
| Host and process workspace content on your instructions | Contract with you; you supply the basis toward your own data subjects |
| Security, fraud prevention, abuse detection | Legitimate interests (Art. 6(1)(f)) |
| Tax, accounting, and legal obligations | Legal obligation (Art. 6(1)(c)) |
| Optional marketing email | Consent (Art. 6(1)(a)), which you can withdraw |
| Non-essential cookies | Consent, under LSSI-CE Art. 22.2 |
4. Who we share data with
We do not sell personal data.
We use processors and service providers only as needed to run PlanDesk:
- EU hosting and object storage
- Transactional email delivery
- Payment processing when you subscribe
- Identity verification if you use KYC features
- Google, if you choose Google sign-in
These parties receive only what they need and are bound by contract. We may also disclose data if the law requires it, or to defend legal claims.
5. International transfers
Primary hosting is in the European Union. Some providers (for example payment or Google sign-in) may process data outside the EEA. Where that happens, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses, plus any extra measures the provider applies.
6. How long we keep data
- Account data: for as long as the account is open, then for a limited period needed to close it and handle disputes
- Our own invoices and tax records: for the periods required under Spanish tax and commercial law (generally four to six years)
- Workspace content: until you delete it or close the workspace, subject to backups and any legal hold
- Security logs: for a short operational period unless a security or legal event requires longer
- Cookie data: as stated in the Cookie Policy
7. Your rights
You may:
- Access your personal data
- Rectify inaccurate data
- Request erasure, where the law allows
- Restrict or object to certain processing
- Receive a portable copy of data you provided
- Withdraw consent, without affecting processing that already took place
- Lodge a complaint with a supervisory authority
To exercise these rights, email hello@lookero.com. We may need to verify your identity.
Supervisory authority: Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, Spain. Website: www.aepd.es. Phone: +34 901 100 099.
If you are in another EU or EEA country, you may also contact your local data protection authority.
8. Cookies
We use cookies as described in the Cookie Policy. Strictly necessary cookies do not require consent. Non-essential cookies are only set after you consent, in line with Article 22.2 LSSI-CE.
9. Security
We use encryption in transit, access controls, and operational measures appropriate to a multi-tenant business application. No method of transmission or storage is completely secure.
10. Children
PlanDesk is a business service. It is not directed at children under 16. We do not knowingly collect data from children.
11. Changes
We may update this policy. The date at the top will change. Material changes will be posted on this page. Continued use after the update means you have seen the new version.
12. Contact
LOOKERO HUB S.L.
Calle Paseo de Gracia 19, Planta Baja, 08007 Barcelona, Spain
Privacy: hello@lookero.com
Product support: support@plandesk.io