Laia EscrigEnergetic nutrition · Yoga

Privacy policy

1. Who is responsible

  • Data controller: Laia Escrig Bertó
  • Tax ID (NIF): 20033243J
  • Address: Calle Los Santos 18, 46020 Valencia, Spain
  • Email: laia@laiaescrig.com

This policy explains what personal data I process when you use laiaescrig.com, what I use it for, who I share it with, how long I keep it and what rights you have. The EU General Data Protection Regulation (GDPR) and Spain's Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) apply.

2. What data I process and why

I only process the data you give me or that comes from using the site:

  • Your account: name, email, language and password (stored encrypted by the sign-in service). If your account uses two-step verification, also the setup for your authenticator app. This lets you sign in to your space.
  • Your space: the recipes, classes and products you save, your shopping list, and your progress in classes and courses. This makes the site work as you expect.
  • Booking the free assessment call: name, email, language, how you found me, your main health goal and anything you want to tell me. This is to prepare for our call.
  • Nutrition programme: your programme dates, my notes, the documents I send you, the results and photos you upload and the messages we exchange. This is to support you through the programme.
  • Contact form: name, email, subject and message. This is to reply to you.
  • My mailing list: name, email and language, if you sign up for the recipes, a guide or my newsletter. This is to send you what you asked for.
  • Payments: the status of your subscription or purchase and a customer reference. Your card details are handled by Stripe and never pass through this site.
  • Live classes: your name in the room and, if the class is recorded, your image and voice if you turn on your camera or microphone.
  • Consultation video calls: if you agree when booking, the calls are recorded to produce a transcript and a summary, which I keep with my notes. The recording is deleted as soon as they are done. This is to prepare your follow-up.
  • Access log: who opens each document and when, for security.

3. Health data

Your health goal in the booking, the transcript and summary of consultations, and the results, photos, notes and messages in the programme, are health data, a special category of data. I only process them with your explicit consent: you tick a box when you book and when you upload each document, and you agree to it in the programme contract. Only you and I can see them. You can withdraw your consent at any time by writing to me, without affecting what was processed before.

4. Legal basis

  • Performance of a contract: your account, your space, the programme, subscriptions and payments.
  • Consent: booking the assessment call, health data, the mailing list and the newsletter.
  • Legal obligation: invoices and payment records.
  • Legitimate interest: the document access log, to protect your data.

5. Who I share your data with

I don't sell or hand over your data. To run the site, these providers process it on my behalf under a data processing agreement:

  • Supabase: database, account sign-in and files, on servers in the European Union.
  • Vercel: hosting for the site.
  • Resend: sending the site's emails.
  • MailerLite: my mailing list and newsletter.
  • Stripe: payments and subscriptions.
  • Daily: live classes, consultation video calls, their recordings and the transcript and summary of consultations.
  • Bunny.net: storing and playing the class videos.
  • TidyCal and Google: the calendar for calls and video calls.

Some of these providers are US companies. When your data leaves the European Economic Area, it does so with the safeguards the GDPR provides for: the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

I will only pass your data to an authority when the law requires it.

6. How long I keep your data

  • Your account and your space: while you have an account. If you don't sign in for three years, I'll email you first and then delete it.
  • Programme, documents and messages: two years after your last consultation, or sooner if you ask.
  • Bookings from people who don't start the programme: twelve months after the call.
  • Mailing list and newsletter: until you unsubscribe. Every email has a link to do so.
  • Payments and invoices: as long as tax and commercial law requires.

7. How I protect your data

Each person can only see their own data: the database checks this on every access. Accounts with health data ask for a two-step verification code. Your documents are kept in private storage and only open through a link that expires after one minute. Data is encrypted in transit and at rest.

8. Your rights

At any time you can:

  • Access your data and find out how I process it.
  • Have it corrected if it is inaccurate.
  • Have it deleted. From your account you can delete what you have uploaded and ask for the whole account to be deleted.
  • Have its processing restricted, or object to it.
  • Receive it in a format you can take to another service.
  • Withdraw your consent.

Write to me at laia@laiaescrig.com. I'll reply within one month. If you think I haven't handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

9. Children

If you are under 14, please don't give me any personal data without the consent of your parent or guardian.

10. Cookies

This site only uses the technical cookies it needs to work. The cookie policy has the details.

11. Changes

If I change this policy, I'll publish the new version here with its date. If the change is significant, I'll let you know by email.

Last updated: 28 October 2026.