This policy explains what personal data The Expenditure handles, why, and what rights you have.
Who is responsible
Digital Resources Growth, S.L., operator of theexpenditure.com. Contact for any privacy matter: [email protected].
What data we handle and why
- Messages you send us. If you write to us (corrections, tips, documents, suggestions, press inquiries), we use your email address, name and the content of your message to read it, reply and, where relevant, follow up on it. The legal basis is our legitimate interest in running an editorial publication and responding to readers. If you ask to remain anonymous, we do not publish or share anything that identifies you.
- Newsletter. If you subscribe to our newsletter, your email address is managed by our newsletter provider, Substack, to send you the newsletter. The legal basis is your consent, which you can withdraw at any time with the unsubscribe link in every email.
- Technical data. When you visit the site, our hosting provider (Hostinger) and our security and delivery network (Cloudflare) process technical data such as your IP address, browser type and the pages requested, to deliver the site and protect it against abuse. The legal basis is our legitimate interest in keeping the site available and secure.
- Reader polls. Votes are anonymous. We do not link a vote to your identity.
- Cookies. See our Cookie Policy.
We do not sell personal data, and we do not use it for advertising profiles.
How long we keep it
Messages are kept for as long as needed to handle them and any follow-up, and then deleted, unless the law requires us to keep them longer. Newsletter data is kept until you unsubscribe. Technical logs are kept for short periods set by our providers for security purposes.
Who we share it with
Only with the providers that help us run the site and the newsletter (hosting, security and delivery network, email newsletter), acting on our behalf or under their own terms where they act independently. Some of these providers may process data outside the European Economic Area. Where they do, the transfer is covered by safeguards recognized under the GDPR, such as the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you can withdraw it at any time. Write to [email protected].
If you think we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es.
Children
The site is not directed at children under 14, and we do not knowingly collect their data.
Changes
We may update this policy. The current version is always the one published on this page.
Last updated: October 2, 2026.