Skip to content
YZ Luxe Studio

Privacy policy

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), we inform you about how we process your personal data.

Last updated: September 17, 2026

1. Data controller

  • Yuliana Zaragoza (YZ Luxe Studio)
  • Tax ID: Z1511005W
  • Address: C/ Salvador Soler i Soler 22, 46780 Oliva (Valencia)
  • Email: yzluxestudio@gmail.com
  • Phone: 611 588 928

2. Data we process and purposes

  • Contact form: name, email, phone and message, to handle your enquiry.
  • Customer account and purchases: identification, contact, shipping and billing data (including tax ID if you request a full invoice), to manage your account, orders, deliveries, invoices and after-sales service.
  • Course bookings: identification, contact and payment data, to manage enrolment and issue the invoice.
  • Back-in-stock alerts: email, to notify you when a product is available again.
  • Marketing communications: email, only if you have given your express consent.
  • Browsing: technical and usage data through cookies, in accordance with our Cookie policy.

3. Legal basis

  • Performance of a contract or pre-contractual measures (purchases, courses, customer account).
  • Compliance with legal obligations (invoicing, tax, consumer law).
  • Consent (contact form, back-in-stock alerts, marketing communications, non-essential cookies).
  • Legitimate interest (website security, fraud prevention).

4. Data retention

We keep data for as long as the relationship lasts and, afterwards, for the periods required by law (for example, invoicing records are kept for at least 4 years for tax purposes and 6 years for commercial purposes). Contact form data is kept for a maximum of 12 months. Data processed on the basis of consent is kept until you withdraw it.

5. Recipients and processors

We do not share your data with third parties except where legally required. To provide the service we use providers acting as data processors with appropriate safeguards:

  • Supabase (database and authentication) and Vercel (hosting).
  • Stripe and PayPal (payment processing): they receive only the data needed to take payment.
  • Resend (transactional email delivery).
  • Courier companies, for home delivery of orders.
  • Google (Maps, Analytics and reviews), only if you accept the corresponding cookies.
  • Booksy, if you book an appointment through its platform (processing subject to its own policy).

6. International transfers

Some providers may be located outside the European Economic Area (for example, in the United States). In those cases, transfers are covered by European Commission adequacy decisions (such as the EU-US Data Privacy Framework) or standard contractual clauses.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to yzluxestudio@gmail.com indicating the right you wish to exercise. You can also delete your account from your customer area.

If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply technical and organisational measures to protect your data: encrypted communications (HTTPS), access control, daily backups and secure password storage. Card details are never stored on our systems; they are processed directly by the payment gateway.

9. Minors

The online shop and courses are intended for people over 18 years of age.