Privacy Policy

Last updated: 07.07.2026

‍ ‍

This Privacy Policy explains how Beautiful Plan ("we," "us," "our") collects, uses, and protects the personal data of visitors and customers of beautiful-plan.com (the "Site"), in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection law.

‍ ‍

1. Who We Are (Data Controller)

‍ ‍

The data controller responsible for your personal data is Beautiful-Plan.com, based in Girona / Catalonia, Spain, contactable at dedesignersha@gmail.com.

‍ ‍

2. What Data We Collect

‍ ‍

  • Contact & order data: name, email address, billing address (if required), order history

  • Payment data: processed directly by our payment processor(s) — [e.g., Stripe, PayPal, Squarespace Payments] — we never see or store your full card details

  • Technical/visibility data: IP address, approximate location, browser and device type, pages viewed, and cookies — collected automatically whenever you visit the Site

  • Communications: anything you send us via email or a contact form

‍ ‍

3. Why We Collect It (Legal Basis)

‍ ‍

  • To process and deliver your order — performance of a contract

  • To respond to questions or support requests — legitimate interest

  • To send marketing emails, only if you opt in — consent, which you can withdraw at any time

  • To meet tax and accounting obligations — legal obligation

  • To understand how visitors use the Site (e.g., which pages are viewed, general traffic patterns) — legitimate interest, via basic analytics

‍ ‍

4. Who Can See Your Data

‍ ‍

  • Us, to fulfil your order and respond to questions

  • Squarespace, our website and e-commerce host

  • Stripe, PayPal, Squarespace Payments, to process payments securely

  • [Google Dashboard/Goggle Ads, to send order confirmations and, if opted in, marketing emails

‍ ‍

We do not sell your personal data, and we do not make your personal data publicly visible to other visitors or customers.

‍ ‍

5. International Data Transfers

‍ ‍

Some service providers (e.g., [Squarespace/Stripe]) may process data outside the EU/EEA, including in the United States. Where this happens, transfers are protected using Standard Contractual Clauses or an equivalent GDPR-recognized safeguard.

‍ ‍

6. How Long We Keep Data

‍ ‍

Order and invoice data is retained as long as required by Spanish tax law 4–6 years. Marketing data is kept until you unsubscribe or withdraw consent.

‍ ‍

7. Cookies & Site Visibility Tracking

‍ ‍

The Site uses cookies necessary for checkout to function, and — where enabled — analytics cookies that let us see aggregate visitor behavior (not who you are individually, unless you've created an account or placed an order). You can manage cookie preferences through your browser or a cookie consent banner.

‍ ‍

8. Your Rights

‍ ‍

You have the right to:

‍ ‍

  • Access the data we hold about you

  • Correct inaccurate data

  • Request deletion ("right to be forgotten"), subject to legal retention rules

  • Restrict or object to certain processing

  • Receive a portable copy of your data

  • Withdraw consent at any time

  • Lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es) or your local supervisory authority

‍ ‍

To exercise any right, contact dedesignersha@gmail.com.

‍ ‍

9. Children

‍ ‍

The Site is not directed at children under 16, and we do not knowingly collect their data.

‍ ‍

10. Security

‍ ‍

We use reasonable technical and organizational measures to protect your data, though no online system is 100% secure.

‍ ‍

11. Changes to This Policy

‍ ‍

Updates will be posted here with a revised "Last updated" date.

‍ ‍

12. Contact

‍ ‍

dedesignersha@gmail.com