Privacy policy

Last updated: 28 August 2026

This is an English translation provided for convenience. The Spanish version, which is the legally binding one under Spanish law, is available at Política de privacidad.

1. Data controller

2. This site uses no cookies

This website sets no cookies of any kind, neither its own nor third-party ones. It uses no analytics, tracking, advertising or profiling tools, and stores nothing in your browser.

That is why you will not see a cookie banner: there is simply nothing to consent to.

3. What data is processed, and where it comes from

This site has no forms. The only personal data processed is what each person chooses to share when getting in touch by email, WhatsApp or Instagram:

• Your name, or the one you use in the messaging app.
• Your email address or phone number, depending on the channel.
• Any information you freely include in your message.

No special categories of data are requested. If, during the conversation, someone shares health-related information, it is used solely to assess whether a session is suitable, and treated with the utmost confidentiality.

4. What it is used for

• Replying to enquiries.
• Arranging, organising and following up on sessions.
• Meeting applicable legal, accounting and tax obligations.

It is not used to send unsolicited marketing, and no profiling is carried out.

5. Legal basis

• Consent of the data subject, understood to be given when sending the message (art. 6.1.a GDPR).
• Pre-contractual measures and performance of the requested service (art. 6.1.b).
• Compliance with legal obligations regarding invoicing (art. 6.1.c).

6. How long it is kept

Data is kept for as long as the relationship lasts and afterwards for the periods legally required to address any liabilities. Enquiries that do not lead to an appointment are deleted once they are no longer needed.

7. Who else can access it

Data is not shared with third parties except where legally required. The following providers do act as data processors:

• Netlify, Inc. — website hosting. It records technical connection data, such as the IP address, in order to provide the service and protect it from abuse.
• Google LLC — the contact address is a Gmail account. In addition, this site loads its typefaces from Google Fonts, which means that the IP address of anyone visiting the site is communicated to Google at the moment the fonts load.
• Meta Platforms, Inc. — if contact happens via WhatsApp or Instagram, the conversation is also governed by their own policies.

Some of these providers are located outside the European Economic Area. Those international transfers rely on the EU-US Data Privacy Framework and on the standard contractual clauses approved by the European Commission.

8. Published testimonials

The testimonials shown on the site are published with each person's first name and the initial of their surname, and only with their prior consent. Any of them may ask for theirs to be removed at any time by writing to the contact address, and it will be taken down promptly.

9. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw consent previously given, without affecting the lawfulness of processing carried out beforehand.

To do so, write to blancazhang.info@gmail.com stating the right you wish to exercise. A copy of an identity document may be requested to verify your identity.

If you believe your data has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

10. Security

Reasonable technical and organisational measures are in place to protect data against loss, unauthorised access or misuse. The site is served entirely over an encrypted connection (HTTPS).

11. Changes to this policy

This policy may be updated to reflect legal or service changes. The date shown at the top indicates the most recent revision.