1. Who We Are
The Letting Go Method is operated by Océano ("we", "our", "us"). We are the data controller responsible for your personal data collected through this website and through our session and membership services.
Contact: hello@oceanolettinggo.com
2. What Data We Collect
We collect the following categories of personal data:
- Identity data: full name, email address.
- Communication data: messages you send us via email or contact forms.
- Payment data: billing information processed by Stripe. We do not store card details directly — Stripe handles all payment processing under their own privacy policy.
- Account data: login credentials and membership status if you register for the Online Method.
- Technical data: IP address, browser type, device information, and pages visited, collected via server logs and analytics.
- Health information (where voluntarily provided): if you share health conditions relevant to participating in water sessions. This is treated as special category data under GDPR Article 9.
3. How We Use Your Data
We use your personal data for the following purposes:
- To process bookings and payments for 1:1, group, and corporate sessions.
- To create and manage your membership account.
- To respond to your enquiries and provide customer support.
- To deliver the Online Method content you have purchased.
- To send service-related communications (booking confirmations, reminders).
- To comply with legal obligations.
- To improve our website and services based on usage analytics.
4. Legal Basis for Processing (GDPR)
- Contract performance: processing necessary to fulfil your booking or membership (Art. 6(1)(b)).
- Legitimate interests: improving our services and detecting fraud (Art. 6(1)(f)).
- Legal obligation: where we are required to retain data by law (Art. 6(1)(c)).
- Consent: for optional marketing communications (Art. 6(1)(a)). You may withdraw consent at any time.
- Explicit consent: for any health data you voluntarily share (Art. 9(2)(a)).
5. How Long We Keep Your Data
- Account and booking records: 6 years from the date of service (legal and tax compliance).
- Marketing communications: until you withdraw consent or unsubscribe.
- Enquiry and contact data: 2 years from last contact.
- Technical/log data: up to 12 months.
6. Who We Share Your Data With
We do not sell your personal data. We share data only where necessary with:
- Stripe: payment processing. See stripe.com/privacy.
- Vimeo: video content delivery for Online Method members. See vimeo.com/privacy.
- Google Fonts: typography served from Google servers (your IP may be processed). See Google Privacy Policy.
- Our hosting provider: server infrastructure for this website.
- Legal authorities: where required by law.
7. International Transfers
Some of our third-party providers operate outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions) in accordance with GDPR Chapter V.
8. Your Rights
Under GDPR, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten") where applicable.
- Restrict processing in certain circumstances.
- Data portability — receive your data in a structured, machine-readable format.
- Object to processing based on legitimate interests.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at hello@oceanolettinggo.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority (in Spain: AEPD).
9. Cookies
We use cookies and similar technologies. For full details, see our Cookie Policy.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our services after any changes constitutes acceptance of the updated policy.