Skip to content
sumaq.
← Back to home

Privacy policy

Last updated: October 14, 2026

Olivia Gloria Courtot, trading as Sumaq ("we"), is committed to protecting the privacy of visitors to oliviatransformation.com (the "Site") and of the people she accompanies. This policy explains which data we collect, why, for how long, with whom it is shared and what your rights are, in line with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

2. Data we collect and why

Browsing the Site

We measure the Site's audience with PostHog, hosted in the European Union, in cookieless mode: no identifier is stored on your device and you are not tracked from one visit to the next. The events collected (page views, button clicks, device type, approximate country) are aggregated to understand what works on the Site. Legal basis: our legitimate interest in improving the Site.

Applying to a programme

When you apply to a circle, we collect your name, email, phone, country and time zone, age, and your answers about your path, what calls you and what you need to feel safe. Some questions concern your physical or mental health: this information, which is sensitive data, is collected only with your explicit consent, in order to adapt the programme to your safety. Legal basis: pre-contractual steps at your request, and your explicit consent for health information.

Your answers are read only by Olivia Gloria Courtot and are used solely to assess your application and then to accompany you.

Newsletter and free practice

When you request the free guided practice, we collect your email and, if you wish, your first name, to send it to you and then send you our letters. Subscription is confirmed by a validation email (double opt-in). Legal basis: your consent, which you can withdraw at any time via the unsubscribe link in every email.

Email exchanges

When you write to us, we keep your messages to reply and follow up. Legal basis: legitimate interest, then performance of the contract.

3. Recipients and processors

Your data is intended for Olivia Gloria Courtot. It is processed by the following technical providers, acting on our instructions:

  • Vercel Inc. (USA): hosting of the Site and execution of the forms.
  • Resend Inc. (USA): sending of emails (subscription confirmation, applications, letters).
  • PostHog Inc., hosted in the European Union: cookieless audience measurement.
  • Google LLC (USA): application form, when the external form is used.

We never sell or rent your data. Transfers to the United States are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.

4. Retention periods

  • Application data: deleted if the application is not accepted, and at the latest 12 months after the end of the journey for participants, except for accounting obligations.
  • Health information: deleted if the application is not accepted, or at the end of the journey.
  • Newsletter: until you unsubscribe, then 3 years on a suppression list to honour your choice.
  • Email exchanges: 3 years from the last contact.
  • Accounting records: 6 years, as required by law.
  • Audience measurement: aggregated data, without personal identifiers.

5. Your rights

You have the right to access, rectify, erase, restrict, port and object, and to withdraw your consent at any time. To exercise them, write to oliviacourtot@sumaqnaturopathie.com. We reply within one month.

You may also lodge a complaint with a supervisory authority: the AEPD in Spain (aepd.es) or the CNIL in France (cnil.fr).

6. Security

The Site is served over HTTPS. Access to data is limited to the controller, protected by strong authentication, and the providers we use offer security guarantees in line with the GDPR.

7. Minors

The programmes are intended for adults. We do not knowingly collect data about minors.

8. Changes

This policy may be updated; the date at the top of the page is authoritative. Newsletter subscribers are informed of any substantial change.