Privacy Policy

1. Data Controller

Erica Rivera Career Strategy, operated by Erica Rivera, is the data controller for your personal information. We are based in Spain and committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data We Collect

We collect personal data only when necessary to provide our services and improve your experience. The types of data we collect include:

• Email Address: Collected through our email signup forms and contact submissions
• Name: Collected when you sign up for our mailing list or schedule a call
• Phone Number: Optionally collected when scheduling consulting calls
• Usage Data: Information about how you interact with our website (via Google Analytics)
• Cookies: Technical data to remember your preferences and enhance your browsing experience

3. How We Use Your Data

We use your personal data for the following purposes:

• To send you emails you've requested (newsletters, updates, event invitations)
• To respond to your inquiries and provide customer support
• To schedule and manage coaching calls through Calendly
• To analyze website traffic and improve our services (Google Analytics)
• To comply with legal obligations
• To prevent fraud and ensure website security

4. Legal Basis for Processing

Under GDPR, we process your personal data based on:

• Consent: When you explicitly opt-in to receive emails or provide contact information
• Contract: To fulfill services you request (coaching calls, resource delivery)
• Legitimate Interest: To improve our website functionality, security, and user experience
• Legal Obligation: To comply with applicable laws and regulations

5. Third-Party Services

We use the following third-party services that may process your personal data:

• Google Analytics: Website traffic analysis. Google may collect and use data according to Google's privacy policy
• Calendly: Scheduling tool for consultation calls. Data is processed according to Calendly's privacy policy
• Loom: Video hosting and embedding. Data handled per Loom's privacy policy
• Vimeo: Video hosting and embedding. Data handled per Vimeo's privacy policy
• Google Fonts: Web fonts service. Google may collect usage data
• Netlify Forms: Form submission handling. Submitted data stored securely

We have data processing agreements in place with these service providers to ensure they comply with GDPR and protect your information.

6. Cookies

Our website uses cookies to enhance your experience. Cookie types include:

• Essential Cookies: Required for website functionality (form submissions, navigation)
• Analytics Cookies: Help us understand visitor behavior through Google Analytics
• Third-Party Cookies: Set by embedded content (Calendly, Loom, Vimeo)

You can control cookie settings through your browser preferences. Disabling cookies may affect website functionality.

7. Your GDPR Rights

As a data subject, you have the following rights under GDPR:

• Right of Access: Request a copy of your personal data we hold
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format and transfer it elsewhere
• Right to Object: Opt-out of certain processing, including marketing communications
• Right to Withdraw Consent: Withdraw consent at any time without penalty

To exercise any of these rights, contact us at erica@careerdivacoaching.com with "Data Subject Request" in the subject line. We will respond within 30 days.

8. Data Retention

We retain your personal data for the following periods:

• Email List Data: Retained until you unsubscribe or request deletion
• Contact Form Data: Retained for 2 years or until you request deletion
• Analytics Data: Retained by Google Analytics per their standard retention policies
• Scheduling Data: Retained in Calendly until the event passes or you request deletion

You can request deletion at any time by contacting us directly.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. This includes:

• HTTPS encryption on all website pages
• Secure form handling through Netlify
• Regular security assessments
• Limited access to personal data (staff only when necessary)

However, no security system is completely impenetrable. We cannot guarantee absolute security.

10. International Transfers

Your data may be transferred to countries outside the EU/EEA (such as the United States) where third-party services we use are located. When data is transferred internationally, we ensure it is protected by appropriate safeguards, including:

• Standard contractual clauses (SCCs)
• Binding corporate rules
• Adequacy decisions by the European Commission

11. Children's Privacy

Our website and services are not intended for individuals under 18 years old. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information and terminate the child's access to our services.

12. Marketing Communications

We may send you marketing emails only with your explicit consent. You can opt-out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any email
• Contacting us at erica@careerdivacoaching.com

Opting out of marketing emails will not affect transactional emails (e.g., scheduled call confirmations).

13. Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our website after changes become effective constitutes your acceptance of the updated policy.

14. Contact Us

If you have questions about this privacy policy or how we handle your data, please contact us:

If you believe we have violated your privacy rights under GDPR, you also have the right to file a complaint with your local data protection authority (supervisory authority) in Spain or your country of residence.

15. Compliance Statement

Erica Rivera Career Strategy is committed to complying with the General Data Protection Regulation (GDPR) and all applicable data protection laws. This privacy policy reflects our commitment to transparency and respect for your personal data.