Privacy policy

Data controller

Juan Delgado Higueras, Tax ID 77435464F, Calle Huerta Grande, 32, 23160 Los Villares (Jaén), Spain. For anything about your data, write to [email protected].

What data we process and why

Purchase: your email, your name and country if you give them at checkout, the amount and the payment status (paid or refunded). Card details go directly to Stripe; we never see them.

Student area: your email, to create your account and send you the sign-in link, and which lessons you have completed, to show your progress.

Contact: whatever you tell us if you email us.

Visit statistics: we count visits to the website in aggregate (which website or link you came from, the page, the language, the country and whether you use a phone or a computer) and what you do on the sales page (which parts you see, which videos you play, which buttons you press, which questions you open and how long you stay) to improve it. To group the data of a single visit we use a random number that only exists while the page is open: it is not stored on your device, we do not use cookies for these statistics, we do not store your IP address and we cannot tell who you are or recognise you on another visit. If you buy, we also store which link, ad and visit you came from.

Meta ads (Facebook and Instagram), only if you accept their cookies in the website notice: the Meta pixel is loaded, which stores its cookies in your browser and tells Meta which pages of this website you visit and whether you start a purchase. If you buy, our server also sends Meta the purchase (amount and currency), your email and country encrypted (with SHA-256, as Meta requires), your IP address, your browser and the identifiers in its cookies. This tells us which ads bring students and lets Meta show the ads to people who may be interested in the course. If you do not accept, nothing is sent to Meta.

We do not sell your data.

Legal basis

To sell you the course and give you access: it is necessary to perform the purchase contract (Article 6(1)(b) GDPR).

To keep invoices and sales records: required by tax and commercial law (Article 6(1)(c) GDPR).

To answer your messages: your consent when you write to us (Article 6(1)(a) GDPR).

For visit statistics and the source of purchases: our legitimate interest in knowing which channels work, with aggregate data that does not identify you (Article 6(1)(f) GDPR).

For Meta cookies and sending the purchase to Meta: your consent when you press “Accept” in the cookie notice (Article 6(1)(a) GDPR). You can withdraw it at any time with the “Cookies” link at the bottom of the page.

How long we keep it

Your account data and progress, while you have access to the course or until you ask us to delete them.

Sales records, for as long as the law requires (generally up to 6 years for tax and commercial obligations).

Who else processes it (processors)

To run the website we use these providers, who only process your data on our instructions:

Stripe (payments), Supabase (database, accounts and sign-in emails), Cloudflare (storage of the course videos) and the provider of the server that hosts the website.

If you accept its cookies, also Meta Platforms Ireland Ltd., which receives the ad data described above and processes it as joint controller with us to measure the ads, and under its own privacy policy (facebook.com/privacy/policy) to improve its ads.

Some of them may process data outside the European Economic Area, for example in the United States. In that case they do so with the safeguards required by the GDPR (European Commission standard contractual clauses or the EU-US Data Privacy Framework).

Your rights

You can ask to access, correct or delete your data, object to its processing, restrict its use or take it with you (portability). Write to [email protected] from your account email.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority in your country.

Cookies

Technical cookies: the ones needed to keep you signed in to the student area, which do not require consent. Your answer to the cookie notice is stored in your browser (local storage) so we do not ask again. Stripe may use its own cookies on its checkout page to process the payment and prevent fraud.

Meta advertising cookies, only if you accept them: _fbp (identifies your browser to Meta, lasts 90 days) and _fbc (stores the click on a Meta ad, lasts 90 days). They are set by the Meta pixel and are used to measure which ads work and show them to people who may be interested.

You can change your answer at any time with the “Cookies” link at the bottom of the page. If you withdraw it, we delete those cookies from this browser and Meta stops receiving data.