Privacy Policy
Last Updated : 22 August 2026
This Privacy Policy explains how we collect, use, share and protect your personal data when you visit our website, contact us, or book a course or session. We are committed to protecting your privacy in line with the EU General Data Protection Regulation (GDPR) and Spanish data-protection law (LOPDGDD).
CONTENTS
01
Who are we ( Data Controller ) ?
02
The personal data we collect
03
Special category data (health and
welfare)
04
How we collect your data
09
International data transfers
10
How long do we keep your data?
11
How we protect your data
12
Your privacy rights
05
What do we use your data and our databases for?
legal
13
Minors
06
Marketing communications
14
Changes to this policy
07
Cookies and analytics
15
Contact and complaints
08
Who we share your data with
01
Who we are (data controller)
The data controller is Tantra Tao Bodywork, a sole trader (autónomo) based in Albaicín, Granada, Spain. For any privacy matter, contact us at tantrataobodywork@gmail.com
02
The personal data we collect
Depending on how you interact with us, we may collect:
Identity and contact information — name, email address, phone number.
Booking details — the booked course or session, dates and related correspondence.
Payment details — securely processed by our payment providers; we receive payment confirmation, but not your full card details.
Health and wellness data — when you choose to share it, so that you can provide bodywork safely (see below).
Communications — the messages you send us via form, email, or messaging apps.
Technical and usage data — IP address, device and browser information, and how you use our website, through cookies and similar technologies.
Full descriptions, duration, and prices are shown on the corresponding page.
at the time of booking.
03
Special category data (health and wellbeing)
Because our work involves the body, you may choose to share health, wellbeing or readiness information with us before a session or course. This is “special category” data under the GDPR. We collect and use it only with your explicit consent, only to keep your participation safe, and we keep it strictly confidential. You can withdraw your consent at any time.
04
How we collect your data
We collect data directly from you (through booking and contact forms, email, or in person), automatically through cookies when you use our site, and occasionally from third-party platforms you use to reach us (for example, our booking or community platforms).
05
Why we use your data and our legal bases
To provide our services — managing bookings, courses and sessions — legal basis: performance of a contract.
To maintain your safety during bodywork — legal basis: your explicit consent (health data).
To communicate with you — answer queries and send booking information — legal basis: contract / legitimate interest.
Marketing, when you have subscribed — legal basis: consent
Legal and accounting obligations — invoicing and tax records — legal basis: legal obligation.
To operate and protect our website and improve our services — legal basis: legitimate interest .
06
Marketing communications
We only send marketing emails or newsletters if you have asked to receive them. You can unsubscribe at any time using the link in any email or by contacting us. Withdrawing marketing consent does not affect service-related messages about a booking you have made.
07
Cookies and analytics
Our site uses cookies and similar technologies for essential functionality and, with your consent, for analytics and marketing. You can accept, reject or manage non-essential cookies through the cookie banner and your browser settings.
08
Who we share your data with
We do not sell your personal data. We only share it with trusted providers who allow us to process your data.
They assist in operations, acting as data processors under contract, including:
our web, booking and accommodation platform (e.g. Wix);
our payment providers (e.g. Wix Payments, Stripe, PayPal);
our email and, where used, community platforms (e.g., Skool for Level III) ;
our agency, and public authorities when required by law.
09
Courses, certification and the Skool community
Some of our suppliers are located outside the European Economic Area (for example, in
United States). When data is transferred internationally, we rely on safeguards
appropriate measures, such as the European Commission's Standard Contractual Clauses, to protect them
10
How long do we keep your data?
We retain your data only for as long as necessary for the above purposes: booking details and
health while they are necessary to provide our services and attend to any follow-up,
the accounting records for the period required by Spanish law, and the marketing data
until you unsubscribe. After that, we securely delete or anonymize them.
11
How we protect your data
We use appropriate technical and organisational measures to keep your data secure, and we limit access to those who need it. Health information is treated with particular care and confidentiality.
12
Your Privacy rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, to data portability, and to withdraw consent at any time. To exercise any right, contact us at tantrataobodywork@gmail.com. We will respond within the time limits set by law.
13
Minors
Our services and website are intended for adults over 18 years of age. We do not collect
knowingly collecting data on minors.
14
Changes to this policy
We may update this policy from time to time. The current version is always published at
This page, with the date of the last update indicated above.
15
Contact and complaints
For any privacy questions or to exercise your rights, please contact Tantra Tao Bodywork
at tantrataobodywork@gmail.com . If you are not satisfied, you have the right to complain to the
Spanish Data Protection Agency (AEPD) at www.aepd.es.
Albaicín, Granada, Spain