This English version is provided for your convenience. In the event of any discrepancy, the Spanish version is the legally binding text.
Who is the data controller?
Liliana Moral, owner of Reprograma tu Belleza™.
Contact email: info@reprogramatubelleza.com
Website: reprogramatubelleza.com
What data do we collect?
We only collect the data you provide voluntarily through the forms on the website:
- Contact and booking forms: first name, surname, email, telephone number (optional), the reason for your enquiry or the event chosen, the message you write and your declaration that you are over 16 (a mandatory tick box).
- Booking for "Create your Alter Ego": in addition to the above, the image of your Bizum payment receipt, which we use solely to verify the payment and confirm your place.
- Free guide form: your email address.
- Creating an account: first name, surname, email, telephone number (optional), date of birth (optional) and your password, which we never store in plain text — it is stored encrypted using a secure hash function, so that not even we can read it.
- Profile details (optional): if you complete "My details" in your account, also your sex, your postcode (and, derived from it, your province and autonomous community) and a profile photo. None of these is mandatory: they help us tailor the care we give you, and you can delete or change them whenever you like from your account.
- Bizum payment receipts: the image of the receipt you attach when booking is seen only by the business owner, from the website's admin panel and while logged in; it is not attached to any email or shared with anyone. As soon as we confirm your payment, the file is deleted from the server: we keep only the amount and the date in the accounting record.
- Testimonials: if, after your 1:1 Mentoring or your "Create your Alter Ego", you decide to tell us about your experience via the link we send you, we store your first name, your email, the text you write and, if you tick the corresponding box, the date and the exact wording of your authorisation to publish it. We only publish on the website testimonials that carry that express authorisation, always with the first name only and after reviewing them; without it, your feedback is read only by the owner. You can withdraw your authorisation at any time by writing to info@reprogramatubelleza.com and we will remove it from the website.
- Our own audience measurement: to know how many people visit the website and which pages they read, we store a hash code generated from your IP address, your browser and a random key that changes every day. Your IP is never stored, the code does not allow us to identify you or recognise you from one day to the next, it does not use cookies, and the data is automatically deleted after 400 days. More details in the Cookie Policy.
We do not use analytics or advertising cookies, nor do we install third-party tracking pixels. We do use one strictly necessary technical cookie to keep you logged in if you register or sign in to My account — see our Cookie Policy for more details.
For what purpose do we process your data?
- To answer your enquiries and handle your request for information about our services (Create your Alter Ego, Reprograma tu Belleza 1:1, etc.).
- To send you the free guide you request and, if you agree, content related to our services.
- To keep an internal record of contacts and subscribers in order to follow up on your request.
- If you create an account, to identify you when you sign in and to fill in your details automatically in future bookings, so that you do not have to type them again.
What is the legal basis for processing?
The legal basis depends on the purpose of each processing operation. Before submitting any of the forms on the website you tick a box declaring that you have read this policy; where the basis is your consent, you may withdraw it at any time without affecting the lawfulness of the processing carried out beforehand.
Specifically:
- Bookings, service requests and customer account: the performance of the contract or of the pre-contractual steps you ask us to take (art. 6.1.b GDPR) — without that data we cannot handle your booking or your account.
- Accounting record of confirmed payments: compliance with the owner's legal, tax and accounting obligations (art. 6.1.c GDPR).
- Website security and our own audience measurement: our legitimate interest (art. 6.1.f GDPR) in protecting the site against abusive use (attempt limits, anti-bot filters) and in understanding, anonymously and without cookies, how the website is used. You may object to this processing by writing to us.
- Free guide, Blog newsletter and communications about our services: your consent (art. 6.1.a GDPR), which you may withdraw whenever you wish via the unsubscribe link in every email or by writing to us.
Who receives your data?
Your data is not transferred to third parties for commercial purposes. We do use external providers that act as data processors (they help us deliver the service, under contract and with the guarantees of art. 28 GDPR):
- IONOS — web hosting, database and mail server.
- Cloudflare, Inc. — content delivery network and site protection: all traffic to reprogramatubelleza.com passes through its servers (proxy) before reaching our hosting, which means it processes your IP address and connection data in order to serve the website and filter attacks. Cloudflare is based in the United States; the transfer is covered by its certification under the EU-U.S. Data Privacy Framework and by the standard contractual clauses approved by the European Commission, which form part of its data processing agreement.
No international transfers of data are made outside the European Economic Area other than those which, where applicable, are carried out by those providers under their own safeguards (standard contractual clauses or another mechanism valid under the GDPR).
How long do we keep your data?
We keep your data for as long as a relationship or mutual interest exists (for example, while you remain subscribed to the guide or have not requested its erasure) and, in any event, until you exercise your right to erasure. Contact messages are kept for a reasonable time to reply and keep a record, unless you ask us to delete them sooner.
As a guide, we apply the following periods:
- Accounting record of confirmed payments: 6 years from the end of the financial year, as required by commercial and tax law (Spanish Commercial Code and tax regulations).
- Customer accounts: for as long as the account is in use; accounts with no activity for 2 years are deleted, after prior notice by email.
- Contact messages and information requests: 2 years from the last contact.
- Bizum payment receipts: only until we confirm the payment; they are deleted afterwards.
- Audience measurement data: 400 days; deleted automatically.
- Free guide and newsletter: until you unsubscribe or request erasure.
- Testimonials: for as long as they are published or until you withdraw your authorisation or request erasure; private feedback, 2 years.
What are your rights?
You may exercise the following rights, free of charge, by writing to info@reprogramatubelleza.com:
- Access: to know what data of yours we process.
- Rectification: to correct inaccurate data.
- Erasure ("right to be forgotten"): to have us delete your data.
- Objection: to have us stop processing your data.
- Restriction of processing: to have us restrict its use in certain cases.
- Portability: to receive your data in a structured format.
If you feel we have not dealt with your request properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es.
Security measures
We apply reasonable technical and organisational measures to protect your data: encrypted connection (HTTPS/TLS), passwords encrypted using a secure hash function, restricted access to the database and to the server's configuration files, protection against brute-force attacks when signing in, protection against cross-site request forgery (CSRF) in actions that require you to be logged in, and a "trap" field (honeypot) in the forms to filter out automated bot submissions before they are ever stored.
Minors
Our services and the option to request an appointment or booking are aimed exclusively at people over 16 years of age. All contact and booking forms include a mandatory age declaration box ("I confirm that I am over 16"), which must be ticked in order to submit the request. We do not knowingly collect data from anyone under 16; if we find that data about a minor has been provided without the consent of the person holding parental authority or guardianship, we will delete it.
Cookies
This website does not use first-party or third-party cookies for analytics, advertising or tracking purposes. It only uses one technical cookie necessary for customer accounts to work. You can find all the details in our Cookie Policy.
Changes to this policy
We may update this policy to adapt it to new legislation or changes to the site. The date of the last update appears at the top of this document.