How personal information is handled.

Controller

The operator identified in the Legal Notice determines how personal data collected through this website is handled.

Information and purposes

• General enquiries: name, email, optional telephone, optional destination and timing, message, acknowledgement, page source and anti-spam timing data, used to validate and respond to an enquiry.
• Private consultation bookings: details entered into Calendly, appointment information and related communications, used to arrange and administer the consultation.
• Payments: payment and transaction information handled through Calendly's connected Stripe service. The website does not receive full card details.
• Site delivery and security: IP address, request and device information that hosting and content-delivery providers may process to serve and protect the site.
• Privacy preferences: consent version, optional-category selection and timestamp stored locally in the visitor's browser. No name or contact detail is included.

Current contact-form status

The contact form is not currently connected to an email-delivery provider. Submissions are validated transiently by the website but return a controlled unavailable response and are not intentionally stored or delivered by the application. This policy must be updated before contact delivery is enabled.

Legal bases

• Steps requested before a contract and performance of a contract for consultation enquiries, bookings and administration.
• Legitimate interests in operating, securing and responding to general enquiries through the website, balanced against visitor rights.
• Consent for optional storage or access on the visitor's device when the embedded external scheduler is enabled.
• Compliance with applicable accounting, tax, consumer and other legal obligations where relevant.

Service providers and recipients

• Vercel provides website hosting and delivery infrastructure.
• Sanity provides the content-management and content-delivery platform.
• Calendly provides external appointment scheduling when the visitor chooses to load it or opens Calendly directly.
• Stripe provides payment processing through the Calendly booking flow.
• Appropriately qualified independent professionals receive information only where this is necessary for an agreed service and an appropriate basis and notice exist.

International transfers

Some technology providers operate in or use subprocessors in countries outside the European Economic Area. Their published terms describe safeguards that may include adequacy decisions, the EU-US Data Privacy Framework and Standard Contractual Clauses. Further information is available in the providers' privacy notices.

Retention

Personal data is kept only for as long as needed for the relevant enquiry, booking, service, legal obligation or dispute. Retention takes account of the nature of the information, the purpose of the interaction, contractual and statutory periods, and the need to establish or defend claims. Provider records follow the configured account and contractual retention arrangements.

Your rights

Subject to applicable law, individuals may request access, rectification, erasure, restriction, portability or objection, and may withdraw consent without affecting earlier lawful processing. Requests may be made using the contact information stated in the Legal Notice. Individuals may also complain to the Spanish Data Protection Agency (AEPD) at aepd.es.

Data minimisation and security

Do not send passports, identity numbers, financial information, medical information or legal documents through the general enquiry form. If sensitive documents are later required, a suitable secure process should be agreed separately.