Privacy Policy — Gonzalo

1. Information We Collect

We collect information you provide directly: your name, email address, business name, and message content when you fill out contact forms or subscribe to our newsletter. We also collect usage data such as pages visited, time spent on site, and referring URLs through analytics tools.

2. How We Use Your Information

We use your information to: respond to your enquiries and provide consulting services; send newsletter emails you have subscribed to; process course purchases and deliver digital products; improve our website and services; and comply with legal obligations. We never sell your personal data to third parties.

3. Third-Party Services

We use the following third-party services that may process your data: Stripe for payment processing (PCI-compliant); email delivery services for newsletters and transactional emails; and analytics tools for website performance monitoring. Each third party operates under its own privacy policy and data processing agreements.

4. Data Retention

We retain your personal data for as long as necessary to provide our services and fulfill the purposes described in this policy. Newsletter subscriber data is kept until you unsubscribe. Contact form data is retained for up to 24 months. Course purchase records are kept for 7 years for accounting purposes.

5. Your Rights Under GDPR

If you are in the European Economic Area, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data ("right to be forgotten"); restrict or object to processing; request data portability; and withdraw consent at any time. To exercise any of these rights, contact us at the email below.

6. Cookies

Our website uses essential cookies for site functionality. For full details on our cookie usage, please see our Cookie Policy page.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is transmitted over encrypted connections (HTTPS/TLS).

8. Contact Us

For any privacy-related questions or to exercise your data rights, please contact us via the contact form on this website or email us directly. We will respond within 30 days.