Privacy policy

Data controller

Spainlander is operated by Khris Rueda / Spainlander. For privacy requests, contact hello@spainlander.com.

Personal data we collect

We collect the information you choose to provide through the Spainlander site, the readiness check, forms, and paid services.

• Readiness Check data, including name, email, family composition, children's years of birth, timeline, visa pathway, budget range, school preferences, languages, readiness score, and generated plan details.
• Contact and subscription data, including email address, message content, newsletter preferences, and related support history.
• Payment data handled through Stripe. Spainlander receives payment status, plan purchased, billing details needed for receipts, and related transaction records. Spainlander does not receive full card numbers.
• Technical and cookie data, including consent status, device and browser information, IP address, security logs, and analytics data only after you accept analytics cookies.

How we use personal data

• To deliver the relocation roadmap, advisory tiers, readiness check results, and related client support.
• To respond to emails, contact forms, and service questions.
• To process payments, receipts, refunds, and accounting records.
• To send service messages and requested email updates through our CRM tools.
• To keep the website secure, prevent abuse, and maintain reliable hosting.
• To measure website performance and improve content when analytics consent has been accepted.
• To meet legal, tax, accounting, and regulatory obligations.

Legal bases for processing

We process personal data when it is needed to perform a contract with you, when you have given consent, when Spainlander has a legitimate interest in running and securing the service, and when processing is required by law. You can withdraw cookie or marketing consent at any time.

Cookies and analytics

Essential cookies and local storage are used to keep the site working and remember your cookie choice. Analytics cookies and similar non-essential tracking are used only after you click Accept in the cookie banner. You can reopen cookie settings from the footer at any time.

Third parties we use

We share personal data only where needed for the purposes above. Our providers are Stripe for payments, Amazon Web Services for sending email, Mautic for our CRM and email automation, Cloudflare for hosting, security and email routing, Google Analytics after you consent, and professional advisers or public authorities where the law requires it.

International transfers

Some of that processing happens in the United States, and you are entitled to know which parts rather than being told that transfers may occur. Email we send you is processed by Amazon Web Services in the United States, which means the content of our messages to you is handled there. Our CRM and website content run on a server in Arizona, United States. Cloudflare operates a global network that includes the United States. Stripe contracts with European customers through its Irish entity and processes some data in the United States. Google Analytics, which runs only after you accept analytics cookies, processes data in the United States.

These transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework where the provider is certified under it, and on standard contractual clauses approved by the European Commission where it is not. You can ask us at any time which mechanism applies to a specific provider, and we will tell you.

Children's dates of birth given in the Readiness Check are not stored in our CRM. What we keep is the school year group they map to.

Retention

We keep personal data only for as long as needed for the purposes described in this policy. Readiness Check, contact and advisory records are kept during the client relationship and for up to 24 months after the last meaningful interaction, unless a longer period is needed for legal claims or required by law. Payment and accounting records are kept for the periods required by tax and accounting rules. Cookie consent records remain until you reset them, clear browser storage, or replace your choice.

Your GDPR rights

Under the GDPR, you can ask to access your personal data, rectify inaccurate data, delete data, restrict processing, receive portable data, object to processing, and withdraw consent where processing is based on consent. These rights can be limited where Spainlander must keep data for legal, accounting, security, or dispute reasons.

To exercise your rights, email hello@spainlander.com. We may need to verify your identity before completing the request. You also have the right to lodge a complaint with the Spanish Data Protection Agency, the AEPD.

Children's data

Spainlander services are for adults planning a family relocation. If you provide details about children for school or relocation planning, you confirm that you are a parent, guardian, or authorized adult for that information.

Contact

Questions about this policy or your data can be sent to hello@spainlander.com.