1. Introduction

At Espacio Bloom, we are committed to protecting your privacy and handling your personal data with care and transparency. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

This policy applies to all personal data collected through our website www.espaciobloom.es, through our contact forms, and through any direct correspondence with us.

We comply with the EU General Data Protection Regulation (GDPR) and Spanish data protection law (Ley Orgánica 3/2018, LOPDGDD). The data controller responsible for your personal data is Espacio Bloom, based in Oviedo, Asturias, Spain.

2. What we collect

We may collect and process the following personal data:

• Your name and email address when you complete a contact or enquiry form

• Information you share when communicating with us directly by email or through our booking system

• Technical data about your visit — including your IP address, browser type, pages visited, and time spent on the site — collected automatically via cookies and analytics tools

• Information you provide when subscribing to our newsletter, Making a Home in Asturias

We only collect information that is relevant and necessary for the purpose for which it is gathered.

3. How we use it

We use the information we collect for the following purposes:

• To respond to your enquiries and provide the services you have requested

• To send you our newsletter, where you have subscribed and given your consent

• To improve our website and ensure it works well across different devices

• To comply with legal obligations where required

We will never use your data for automated decision-making or profiling. We will not send you unsolicited marketing communications without your prior consent.

Our legal basis for processing your data is: your consent (for newsletter subscriptions), the performance of a contract (for service enquiries), and our legitimate interests (for improving the website and responding to direct communications).

4. Disclosure

We do not sell, rent, or trade your personal data to third parties.

We may share your information only in the following limited circumstances:

• With trusted service providers who help us operate our website or deliver our services — such as our email newsletter platform (Beehiiv) or booking system (TidyCal) — under strict data processing agreements

• Where required by law or by a regulatory authority

• To protect the rights, safety, or property of Espacio Bloom or our clients

Any third-party providers we use are carefully selected and are required to handle your data securely and in accordance with GDPR.

5. Data security

We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your information against unauthorised access, accidental loss, or disclosure.

We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. When data is no longer needed, it is securely deleted.

Please be aware that no transmission of data over the internet can be guaranteed as completely secure. While we do everything we reasonably can to protect your data, we cannot guarantee the absolute security of data transmitted to our site.

6. Your rights

Under GDPR, you have the following rights in relation to your personal data:

Right of access

You can request a copy of the personal data we hold about you.

1. Right to rectification

   You can ask us to correct any inaccurate or incomplete data.

2. Right to erasure

   You can ask us to delete your personal data in certain circumstances.

3. Right to restriction

   You can ask us to limit how we use your data in certain circumstances.

4. Right to portability

   You can ask us to transfer your data to another service provider.

5. Right to object

   You can object to us processing your data for marketing or legitimate interest purposes.

To exercise any of these rights, please contact us at info@espaciobloom.es. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD).

7. Cookies

Our website uses cookies — small text files stored on your device — to help the site function properly and to understand how visitors use it.

We use:

• Essential cookies — necessary for the website to function and cannot be switched off

• Analytics cookies — used to understand how visitors interact with our site, so we can improve it. These are only used with your consent.

You can control and delete cookies through your browser settings at any time. Disabling cookies may affect some functionality of the site.

8. Third-party services

Our website is built on Squarespace, and we use the following third-party services in the course of our work:

• Substack — newsletter delivery. Governed by Substack's Privacy Policy.

• TidyCal — appointment booking. Governed by TidyCal's Privacy Policy.

• Squarespace — website platform. Governed by Squarespace's Privacy Policy.

Each of these providers has their own privacy practices. We encourage you to review their policies if you have concerns about how they handle your data.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will update the date at the top of this page.

We encourage you to check this page periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.

10. Contact us

If you have any questions, concerns, or requests relating to this Privacy Policy or to how we handle your personal data, please don't hesitate to get in touch.

Espacio Bloom

Oviedo, Asturias, Spain

info@espaciobloom.es

We aim to respond to all data-related requests within 30 days.