Last updated: July 2026

1. Introduction

This privacy notice explains how we collect, use, and protect your personal data through your use of our website www.sandranegron.de, including any information you provide when you:

Purchase a product or service

Schedule an appointment

Download a free resource or lead magnet

Sign up for our newsletter or updates

By providing us with your information, you confirm that you are at least 16 years old.

Controller: Sandra Negron

Address: Hessigheimer Strasse 16, 70437 Stuttgart, Germany

Email: [email protected]

Website: www.sandranegron.de

We have not appointed a separate Data Protection Officer as this is not legally required.

2. What Data We Collect

Personal data means any information capable of identifying an individual. We may process:

Identity Data – first name, last name, title or username

Contact Data – email address, telephone number, billing or delivery address

Financial Data – limited payment information (processed securely by our payment providers; we do not store card details)

Transaction Data – details of purchases and payments made between us

Technical Data – IP address, browser type and version, time zone, operating system, device type and other technology used to access the site

Profile Data – usernames, passwords, preferences, feedback and survey responses

Usage Data – how you interact with our website, products and services

Marketing & Communication Data – your preferences in receiving marketing materials and communication settings

Sensitive Data – information you choose to share about your health or wellbeing (for example via intake forms). We process such data only with your explicit consent (Art. 9 GDPR).

If you do not provide data we need to deliver a service or product, we may not be able to fulfil that contract and will inform you if this occurs.

3. How We Collect Your Personal Data

We collect data in several ways:

Direct interactions: when you complete forms, make a purchase, or communicate with us by email or contact form.

Automated technologies: technical data collected via cookies and analytics tools as you browse.

Third parties: information received from trusted partners such as Squarespace, FEA Create, Acuity Scheduling, ThriveCart, Stripe and PayPal.

4. How We Use Your Personal Data

We will only use your personal data when legally permitted under GDPR. The main purposes include:

To provide services and fulfil contracts you enter into with us

To process payments and manage orders securely

To communicate about your appointments or purchases

To send updates, resources, or newsletters if you have subscribed (consent based)

To improve our website and services (legitimate interest)

To comply with legal and accounting requirements

You may withdraw consent at any time by emailing [email protected].

5. Disclosures of Your Personal Data

We share data only when necessary and only with trusted partners who process it securely and lawfully. These may include:

Website & hosting: Squarespace (https://www.squarespace.com/privacy) and FEA Create (https://feacreate.com/privacy-policy)

Scheduling tools: Acuity Scheduling (https://acuityscheduling.com/privacy.php)

Checkout & payments: ThriveCart (https://legal.thrivecart.com/platform/privacy/), Stripe (https://stripe.com/privacy), PayPal (https://www.paypal.com/webapps/mpp/ua/privacy-full)

Professional advisors: legal, accounting or IT professionals as required by law

Authorities: where we must report data for legal compliance

We do not sell or rent your data to anyone.

6. Analytics

We may use analytics tools to understand how visitors use our website, measure engagement, and improve performance. Examples include:

Google Analytics – collects anonymous data on site usage. You can opt out using the Google Analytics Opt-Out Browser Add-On: https://tools.google.com/dlpage/gaoptout

Squarespace Analytics or FEA Create Insights – used to monitor traffic and technical performance.

All analytics data is handled in accordance with GDPR and only used to improve user experience.

7. Advertising

We may use third-party service providers for advertising and remarketing, which may include showing targeted ads on other websites after you have visited ours.

These providers use cookies to:

Inform, optimise, and measure the performance of ads

Serve ads based on your previous visits to our site

Please note that we do not currently recognise browser “Do Not Track” signals.

Facebook & Instagram

Learn about interest-based advertising: https://www.facebook.com/help/164968693837950

Opt out of Facebook ads: https://www.facebook.com/help/568137493302217

Facebook Data Policy: https://www.facebook.com/privacy/explanation

If we introduce additional advertising networks in the future, we will update this section accordingly.

8. Payment Providers

We offer paid services through secure third-party processors. We do not store or collect full payment card details. That information is provided directly to our processors whose use of personal data is governed by their own privacy policies.

All providers comply with the PCI DSS (Payment Card Industry Data Security Standard) to ensure safe handling of payment information.

Our payment processors are:

Stripe – https://stripe.com/privacy

PayPal – https://www.paypal.com/webapps/mpp/ua/privacy-full

ThriveCart – https://legal.thrivecart.com/platform/privacy/

9. International Transfers

Some of our partners are based outside the EU or EEA, including the UK and USA. Whenever data is transferred internationally, we ensure it is protected by:

Adequacy decisions from the European Commission

Standard Contractual Clauses approved by the European Commission

Other appropriate safeguards as required under GDPR

10. Data Security

We use appropriate technical and organisational measures to protect your data from accidental loss, misuse, or unauthorised access. Access is restricted to those who need it for legitimate business purposes and are bound by confidentiality obligations.

11. Data Retention

We keep personal data only as long as necessary to fulfil the purposes for which it was collected, including legal and tax requirements.

Customer and transaction data is typically kept for up to 6 years for tax purposes.

When data is no longer needed, we securely delete or anonymise it.

12. Your Legal Rights

Under GDPR you have the right to:

Request access to your personal data

Request correction of inaccurate data

Request erasure of your data (where legally possible)

Object to processing based on legitimate interest or for direct marketing

Request restriction of processing

Request data portability

Withdraw consent at any time

To exercise any of these rights, email [email protected].

If you believe your data has been handled incorrectly, you can contact the supervisory authority:

Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg

Königstraße 10a, 70173 Stuttgart, Germany

https://www.baden-wuerttemberg.datenschutz.de

13. Third-Party Links

Our website may include links to external sites, plugins, or applications. When you click these, third parties may collect data about you. We are not responsible for their privacy practices and encourage you to read each site’s privacy notice.

14. Cookies

We use cookies and similar technologies to operate our website effectively and enhance your experience.

You can set your browser to refuse some or all cookies or to alert you when websites set cookies. If you disable cookies, some parts of the site may not work properly.

For more information, please see our Cookie Policy: https://www.sandranegron.de/cookie-policy

15. Complaints and Contact

Your first point of contact for any privacy questions or concerns is:

Sandra Negron

Email: [email protected]

If you believe we have not handled your data appropriately, you have the right to contact the authority listed in Section 12.

It is important that the information we hold about you is accurate and up to date. Please notify us if your details change.

16. Updates to This Policy

We may update this privacy notice from time to time to reflect changes in our business or legal requirements. The latest version will always be available on this page and will include the updated “Last Updated” date above.