Legal notice and privacy
Who is responsible
Axon.
What data we process, why and on what basis
What you send us through the contact or booking form (name, email, phone and message), only to answer you and handle your request. Basis: your request, which we handle at your request (GDPR art. 6.1.b). What you write in the chat, to answer your question. Basis: your consent when you write to us (art. 6.1.a). Your booking (day, time, service, who attends you) and your contact details, to manage it and remind you. Basis: the booking you ask for (art. 6.1.b). Your browser (a technical address it generates) if you press “Get notices”, to send you the business's offers and news; you remove it any time from the browser. Basis: your consent (art. 6.1.a). Your email (and your name, if you write it) when you ask for a download or content, to give it to you and send you the access link; kept 12 months. Basis: what you ask for (art. 6.1.b). News by email, only if you accept and confirm it. News and offers from the business, only if you agree. Basis: your consent (art. 6.1.a and the e-commerce law), which you can withdraw at any time. Visits to this site, only if you accept analytics cookies. Basis: your consent (art. 6.1.a). Keeping what the law requires (legal obligation, art. 6.1.c) and protecting the site from abuse, with a temporary count of requests per address (legitimate interest, art. 6.1.f). We do not sell your data or pass it to third parties, unless the law requires it.
Health data
Do not write health data (for example, the reason for your appointment or your symptoms) in the form, the notes or the chat unless they are needed to attend to you: they are a special category of data (GDPR art. 9) and we process them only for that and with your consent.
Who processes it for us
Only to provide the service, and for nothing else: the website's hosting and database (OVH), sending emails (Resend) and reminder text messages (Twilio), the chat assistant (an artificial intelligence service), WhatsApp (Meta), if you write to us there, Cal.com if you book with it and, if the business charges a deposit, Stripe, with the business's own account (Stripe processes that data on its own account). Maps, videos and calendars from other services (Google, Vimeo, YouTube, Cal.com) load by themselves if you have accepted cookies; otherwise only if you press “Load content”.
Transfers outside the European Union
Some of these providers may process data outside the European Economic Area. This is done only with the safeguards the GDPR requires (an adequacy decision of the European Commission or its standard contractual clauses).
The chat
The chat answers with an artificial intelligence assistant, not a person: it says so in the window itself. The text of the conversation (the last lines) is sent to an AI service to generate the reply. Please do not write health or other sensitive data. If it prepares a booking for you, nothing is booked until you press “Confirm”, and the name and email you give are used only for that booking. The business can also answer you from its panel.
News and offers
Only if you agree (a box when you book, which you confirm from the email you get, or by telling the business): we may write to remind you it is time to come back, if you have not come for a while, on your birthday (if you give us the date), to ask for your opinion after an appointment or with the business's news, by email or text message. Every message has its unsubscribe link, and you can do it at any time.
Your booking
If you book, we keep your booking (day, time, service and who attends you) with your contact details to manage it. If you use a discount code or another customer's invitation, we keep it with your booking (and the business knows who invited you, to give them their reward). The confirmation email has a link to change or cancel it. If the business asks for a deposit, you pay it on Stripe's page and we never see your card details.
How long we keep it
Form messages, chat conversations and requests are deleted after 12 months. Bookings and customer records are kept as the business's record while it needs them or until you ask for them to be deleted; afterwards they are kept blocked only for the legal periods. Counted visits are deleted after 14 months. The count of requests per address lasts between 15 minutes and 1 hour. What is deleted may remain up to 12 months, encrypted and unused, in the backups, until they are overwritten.
Cookies and storage
We keep your cookie choice in your browser, with the version of this text and the date, for up to 1 year. Only if you accept analytics do we count visits and page views, with an anonymous identifier (up to 1 year): we do not store your IP address or your browser. If you use the chat, a random identifier is kept in your browser to continue your conversation. Maps, videos and calendars from other services load by themselves if you have accepted cookies; otherwise only when you ask: in both cases that service may use its own cookies. You can change your choice with the “Cookies” link in the footer.
Your rights
You can ask to access your data, correct it, delete it, restrict its processing, object to it, receive it in a portable format and withdraw your consent through the contact form. We answer within a month. If you think we do not handle it properly, you can complain to your data protection authority (in Spain, the AEPD, www.aepd.es).
Minors
This site is not aimed at children under 14. If you are, ask a parent or guardian to use the forms for you.