Privacy Policy

Data controller

David Vox · Tax ID (IVA) ESY4680271S · Arthur Carbonell 8, 08810 Sitges, Barcelona, Spain · info@davidvox.com

Data we collect

• Consultation form: name, email, phone (optional), country or time zone, availability, which service you are applying for, and what you choose to tell us about your situation and intentions.
• Clients: billing details, payment records, scheduling information and any session notes kept with your agreement.
• Technical data strictly necessary for the website to function and stay secure.

Please do not send detailed health information through the website. Any sensitive information you choose to share is processed only with your explicit consent.

Purposes and legal bases

• Responding to your consultation request — your consent (Art. 6.1.a GDPR).
• Providing contracted sessions — performance of a contract (Art. 6.1.b).
• Invoicing and tax records — legal obligation (Art. 6.1.c).
• Website security — legitimate interest (Art. 6.1.f).

Retention

Consultation requests that do not lead to an engagement are deleted within 12 months. Client data is kept for the duration of the engagement and afterwards only as long as required by law (for example, accounting and tax records).

Recipients

Data is never sold. It is shared only with service providers needed to run the practice — website hosting and database, email, payment and accounting providers — under data processing agreements, or with authorities where legally required. Where providers are located outside the European Economic Area, transfers are protected by adequacy decisions or Standard Contractual Clauses.

Your rights

You may access, rectify, erase, restrict or object to the processing of your data, request portability, and withdraw consent at any time by writing to info@davidvox.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

Security

Appropriate technical and organisational measures protect your data against loss, misuse and unauthorised access. Consultation requests are stored in a secured database not publicly readable.

Changes

This policy may be updated. The date at the top shows the latest version.