Privacy Policy

1. Data controller

• Identity: Asociación Junior Empresa Alea Society (hereinafter, “Makroa”)
• Address: Madrid, Spain
• Email: equipo@makroa.com
• Phone: +34 675 97 55 88
• Website: https://makroa.com

You can contact us at any time to exercise your rights or resolve any questions regarding the processing of your personal data by writing to equipo@makroa.com.

2. Data we collect

2.1. Waitlist

When you join our waitlist, we store:

• Name and email address
• Preferred delivery zone, exactly as you type it, plus the district, municipality and postcode when we can work them out
• Nutritional goal (lose fat, build muscle, maintain)
• The language you browse in and your position on the list
• Source data: the campaign parameters in the URL you arrived with (UTM), the page you landed on, the site you came from (referrer) and an anonymous session ID. This tells us which channel brought you here, and the session ID links your signup to your earlier browsing and to the calculator if you used it.

2.2. Macro calculator

The maths happens in your browser, but what you type is stored on our servers, and it is stored step by step, as you go: if you leave halfway through, we keep whatever you had filled in up to that point. Specifically: sex, age, weight, height, activity level, goal and, if you finish, the resulting calories and macros.

Alongside those, each calculator session records the context of the visit: the step you reached, the language you browse in, your browser and device (user agent) and the campaign parameters in the URL you arrived with.

This is tied to an anonymous session ID, not to your name or email, so on its own it does not identify you. It only becomes linked to you if you then join the waitlist from that same session. We use it to size the service (which profiles and calorie ranges people are asking for) and to see where the calculator loses people so we can fix it.

2.3. Menu preferences (thank-you page)

Once you have signed up we ask you, entirely optionally, how many meals a week you would order and whether you follow any diet or have any dietary restriction. You can skip it and your signup stands exactly the same.

None, vegetarian and vegan are dietary preferences and we store them as they come. Allergies, gluten-free and lactose-free, however, are health-related data and fall under the special categories of Art. 9 GDPR: we only store them if you tick the specific consent box shown next to those options. The box is never pre-ticked, and if you leave it unticked those answers are discarded and never reach our database. When you do tick it, we also record the date and time, so we can evidence your consent.

We use this for one thing only: designing your menu and not sending you food you cannot eat. You can withdraw this consent whenever you like by writing to equipo@makroa.com; we will delete that data without affecting your place on the waitlist.

2.4. Browsing data

Independently of cookies, we log basic visit measurement on our own servers: page viewed, referring site, browser and device (user agent), language, campaign parameters and an anonymous session ID. It contains no name or email, although — as noted in 2.1 — the session ID lets us reconstruct your path if you end up signing up.

On top of that, if you accept analytics cookies through our consent banner, we load Google Analytics 4 and Microsoft Clarity, which collect browsing data such as pages visited, time on site, device type, language and country (with no identifiable IP address), plus heatmaps and anonymized recordings of how the page is used. If you decline cookies, neither tool ever loads.

2.5. Data we do NOT collect

We do not ask for bank or payment details. We do not collect data on political opinions, trade union membership, religion, ethnic origin, sex life, or genetic or biometric data. The only health data we process are the allergies and intolerances you choose to give us under the terms of section 2.3. Nor do we knowingly collect data from anyone under 16.

3. Purposes of processing

We process your personal data to:

• Manage the waitlist and send pre-launch communications (name, email, zone, goal).
• Understand which channel brought you here and measure which campaigns work (UTM, referrer, landing page, session ID).
• Calculate your macros and size the service — which profiles and calorie ranges people ask for (sex, age, weight, height, activity level, goal, calculated macros).
• Improve the calculator by seeing at which step people drop off.
• Design your menu and leave out ingredients you cannot eat (meals per week, dietary preferences and, with explicit consent only, allergies and intolerances).
• Analyse and improve the website.
• Comply with legal obligations.

4. Legal basis

• Consent (Art. 6.1.a GDPR): the basis for almost everything we process — joining the waitlist, using the calculator, and answering the optional menu questions. You can withdraw it at any time.
• Explicit consent (Art. 9.2.a GDPR): for health-related data — allergies and intolerances — which are a special category. We collect it through a dedicated box, separate from the rest of the form and never pre-ticked, and we record when you ticked it. Without that consent we process no health data at all.
• Legitimate interest (Art. 6.1.f GDPR): for the basic visit measurement on our own servers, which uses no cookies and builds no advertising profiles.
• Legal obligation (Art. 6.1.c GDPR): when required by applicable law.

5. Data retention

• Waitlist (including zone, goal and source data): until the service launches or until you ask us to delete it. Maximum 24 months from signup if the service does not launch.
• Calculator sessions (finished or abandoned): maximum 24 months from the session, or until you request deletion if they are linked to your signup.
• Menu preferences and health data (allergies and intolerances): while your signup stands, or until you withdraw consent. If you withdraw it, they are deleted immediately even though your signup continues.
• Our own visit measurement: maximum 24 months from the visit.
• Third-party analytics: Google Analytics 4, 14 months (standard configuration); Microsoft Clarity, 30 days for recordings (a reduced sample for up to 9 months) and 9 months for heatmaps.

6. Your rights

Under the GDPR, you have the right to: access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent — including the explicit consent for health data, which you can withdraw on its own without losing your place on the waitlist. To exercise these rights, email equipo@makroa.com.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. Data processors

We use the following data processors: Supabase (database, EU servers), Vercel (web hosting, EU with global CDN), Google Analytics 4 (analytics, EU region configured), Microsoft Clarity (heatmaps and session recordings, United States, with consent only) and Resend (email delivery for our internal new-signup alerts, United States). All processors have signed appropriate data processing agreements.

8. International data transfers

Our main database (Supabase) is hosted in the EU (Frankfurt, Germany), and Google Analytics 4 is set to the EU data region. Microsoft Clarity (only if you accept analytics cookies) and Resend (internal new-signup alerts) process data in the United States. Any transfer outside the EEA is covered by Standard Contractual Clauses (SCCs) approved by the European Commission under Art. 46.2.c GDPR.

9. Cookies

This website uses cookies. For detailed information, see our Cookie Policy.

10. Minors

This website is not intended for minors under 16. We do not knowingly collect personal data from children. If you believe your child has provided us with personal data, contact us at equipo@makroa.com.

11. Updates to this policy

We reserve the right to update this privacy policy. Significant changes will be communicated through this website or by email. We recommend reviewing this page periodically.