Legal
Privacy policy
Last updated: 10 November 2026
Draft: have a professional review this
This text is a working draft and has not yet been reviewed by a lawyer or advisor. Details in square brackets are still pending.
1. Data controller
- Controller: Valeria Flores [full legal name]
- Tax ID (NIF/NIE): [NIF]
- Address: [full address], Spain
- Email: hola@valflores.com
2. What data we process and why
Contact forms (service proposals, podcast guests and general contact): your name, email and whatever you write in the form. We use it to reply to you and, where relevant, to prepare a proposal. Legal basis: your consent and steps taken at your request before entering into a contract (GDPR art. 6.1.a and 6.1.b).
Newsletter, gifts and waitlists: email, name (optional), language and the tag of the form you signed up through (for example, the podcast or a product waitlist). We use it to send you the emails you asked for and news about products, the podcast and the music. Legal basis: your consent (GDPR art. 6.1.a). You can unsubscribe at any time with the link in every email.
Purchases: purchases are made on Stan Store. Stan processes your payment and purchase data as controller or processor under its own terms; we receive the data needed to deliver your product and support you (name, email, product purchased). Legal basis: performance of a contract (GDPR art. 6.1.b) and compliance with legal obligations such as tax rules (GDPR art. 6.1.c).
Statistics: we use Vercel Web Analytics, which measures visits in aggregate without cookies or personal identifiers. Legal basis: legitimate interest in understanding how the site is used (GDPR art. 6.1.f).
3. Processors and providers
We use the following providers, who process data on our behalf:
- Kit (ConvertKit LLC, USA): newsletter, gifts and waitlists.
- Resend (Plus Five Five, Inc., USA): sending contact-form emails and automatic replies.
- Vercel Inc. (USA): website hosting and cookieless statistics.
- Stan Store (Stanwith Inc., USA): sale and delivery of digital products and bookings.
Some of these providers are based in the United States. International transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the standard contractual clauses approved by the European Commission. [Check with each provider].
If you accept third-party cookies, the Spotify and YouTube players load on the page and those companies process data under their own policies. More in the Cookie policy.
4. How long we keep data
- Contact messages: as long as needed to reply and at most [2 years] after the last contact, unless it becomes a business relationship.
- Newsletter and waitlists: until you unsubscribe.
- Purchase data: for the periods required by law (for example, tax rules).
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to hola@valflores.com and stating which right you want to exercise.
If you believe your data has not been handled properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Children
This site is not aimed at children under 14 and we do not knowingly collect their data.
7. Changes
We may update this policy. The date of the last update is shown at the top of the page.
This English version is provided for convenience. If there is any discrepancy, the Spanish version prevails.