INTRODUCTION.

Andrea Padrón through Andrea Padrón ("Company") respects your privacy. This Privacy Policy outlines the Company’s policy regarding the types of information we may collect from you or that you may provide when you visit www.andreapadron.com, www.andreapadron.as.me ("the Website"), including any content, service, functionality, mobile applications, downloadable materials, and courses ("the Services"). If you do not agree with our Privacy Policy, your option is not to use our Website. By accessing or using this Website, you agree to this Privacy Policy and the Terms and Conditions.

MINORS UNDER THE AGE OF 18.

All website users must be at least 18 years old. If we learn that we have received information from a child under the age of 18, we will delete the information. If you have reason to believe that a child under 18 has provided us with Personal Data through the Website or the Services, please contact us, and we will strive to delete the information from our database. If we learn that a user is under 18, we will not disclose any personal information to third parties unless the user has given their consent to participate. If you have reason to believe that a user is under 18, please notify the Company to prevent the disclosure of any personal data without consent.

WHEN WE COLLECT INFORMATION FROM YOU.

We collect and process data when you access our website, complete forms on our Website, register, make a purchase, subscribe to our newsletter, respond to a survey, browse the Website, or use or view our Website via your browser’s cookies. Our Company may also receive your data indirectly from the following sources: Mailerlite, Showit, Calendly Scheduling, among others.

WHAT TYPE OF INFORMATION WE COLLECT FROM YOU.

Voluntary Information: When you visit our Website or use our Services, we may collect certain types of information about you. This includes your name, email address, mailing address, phone number, credit card information, age, nationality, country of residence, company name, profession, or other information that you provide us.  
Automatic Data Collection: We also collect information automatically through cookies and other tracking technologies, such as information about your Internet connection, your IP address, traffic and location data, logs, and other information. The information we collect automatically helps us improve our website and provide a better service. The categories of consumer data we have collected in the last 12 months include names, email addresses, mailing addresses, phone numbers, credit card information, ages, nationalities, countries of residence, company names, and profession.

HOW WE COLLECT YOUR INFORMATION.

The technologies we use for automatic data collection include "cookies." Cookies are small files placed on your computer's hard drive that allow the website or service provider’s systems to recognize your browser and remember certain information. We use functionality cookies to recognize you on our website and remember your previously selected preferences. These could include your preferred language and the location you are in. We use advertising cookies to collect information about your visit to our website, the content you viewed, the links you followed, and information about your browser, device, and IP address. Our Company sometimes shares limited aspects of this data with third parties for advertising purposes. We may also share online data collected through cookies with our advertising partners. This means that when you visit another website, you may be shown advertising based on your browsing patterns on our website. You can refuse to accept browser cookies by activating the appropriate settings on your browser, but if you do so, you may not be able to access certain parts of our Website or Services. We also use flash cookies or web beacons for automatic data collection. You may also provide information that is public or displayed in public areas of the Website, or transmitted to other users of the Website or to third parties ("User Content"). Your User Content is transmitted to others at your own risk.

HOW WE USE YOUR INFORMATION.

The processing of your data is necessary for legitimate interests and does not infringe any fundamental rights or freedoms. Some of those legitimate interests include: improving our online products, overall user experience, marketing, customer data processing, ensuring network and information security, and fraud prevention. We use your information to understand and store information about visitor preferences, collect aggregated data about site traffic and interactions, provide you with information, products, or services that you request or that we believe may interest you, send you account notifications, carry out billing and collection, provide customer service, for advertising purposes, and in any other way we describe when you provide information to us. We use automated decision-making in processing your personal information for some services and products. You may request a manual review of an automatic decision’s accuracy if you are not satisfied with it. We do not sell personal information or consumer data for monetary gain or other valuable consideration.

THIRD-PARTY DISCLOSURES.

Some content or applications on the Website are served by third parties, such as advertisements. We do not control third-party tracking technologies. You should refer to the privacy policies of such third parties for more detailed information on their practices. Our company’s website contains links to other websites. Our privacy policy applies only to our Website, so if you click on a link to another website, you should read their privacy policy.

HOW WE DISCLOSE YOUR INFORMATION.

We may disclose aggregated information about our users and information that does not identify any individual without restriction.  
We disclose to third parties the personal information we collect or that you provide as described in this Privacy Policy, including the following affiliates, associated companies, service providers, and contractors: Google Analytics, Facebook Analytics, Mailerlite, Showit, Calendly Scheduling, and others.  
We use the data you provide to prevent fraudulent purchases by sharing it with credit reference agencies.  
We will disclose information when appropriate to comply with the law or enforce our site policies.  
Do Not Track Policy: Our site respects the Do Not Track ("DNT") browser setting. We track your online browsing activity across other online services.  
Sometimes we may transfer personal data collected from you to third-party processors located internationally. Note that such countries may not have the same level of data protection; however, our collection, storage, and use of your personal data will continue to be governed by this Privacy Policy. 

---

HOW WE STORE AND PROTECT USER INFORMATION

The company securely stores your data on Mailerlite, Calendly Scheduling, and/or Google Suite. We have implemented security measures designed to protect your visit to the website. These include:

- All payment information is encrypted.
- We perform regular malware scans.
- No Internet or email transmission is completely secure or error-free. Please take this into consideration when disclosing personal information over the Internet.
- We will retain your data for at least three (3) years from the time of its collection.

YOUR CALIFORNIA PRIVACY RIGHTS

If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. For more information on your California privacy rights, please visit [https://oag.ca.gov/privacy/ccpa](https://oag.ca.gov/privacy/ccpa).

Under the CCPA, California residents have the right to opt out of the sale of personal information about them or their household, such as their name, mailing address, or email address, and other personally identifiable information. This right is subject to certain exceptions. For example, it does not apply to information we share with certain external service providers so that they can perform business functions for us or on our behalf. You can opt out by sending an email to info@andreapadron.com.

Our policy is that we do not and will not sell your personal information unless you give us your consent or instruct us to do so.

OPT-OUT/UNSUBSCRIBE RIGHTS

You have agreed to receive marketing material from the Company Tand have consented to the Company disclosing your information to third parties for advertising purposes. You can opt out at any time. If you no longer wish to be contacted for marketing purposes, please email us at info@andreapadron.com.

YOUR DATA PROTECTION RIGHTS

- Right to be informed: This means that any person handling your personal data must make clear what they are processing, why, and to whom the data may be transmitted.
- Right of access: This is your right to view the data a Data Controller has about you.
- Right to rectification: You have the right to have your data corrected and amended if what is being stored is incorrect in any way. You can request that we correct any information you believe is inaccurate or request that we complete information that you believe is incomplete.
- Right to erasure: In certain circumstances, you may request the deletion of your personal data. This is also called the “Right to be forgotten.” This would apply if the personal data is no longer necessary for the purposes for which it was collected, or if your consent for processing that data has been withdrawn, or if the personal data has been processed unlawfully.
- Right to restrict processing: This allows you to request the temporary cessation of processing your personal data, such as when a legal dispute or court case needs to be resolved, or while data is being corrected.
- Right to data portability: You have the right to request that the data you provide directly to the Data Controller be provided in a structured, commonly used, and machine-readable format. You may request copies of your personal data. You may also request that we transfer the data we have collected to another organization or directly to you, under certain conditions. We may charge a small fee for this service or for any requested copies.
- Right to object: You have the right to object to further processing of your data that is inconsistent with the primary purpose for which it was collected, including profiling, automation, and direct marketing.
- Rights related to automated decision-making and profiling: You have the right not to be subject to a decision based solely on automated processing.
- Right not to be discriminated against for exercising rights: The Company will not deny goods or services to individuals who exercise their rights as consumers.

If you wish to exercise these rights, please contact us at info@andreapadron.com.

CHANGES TO THE PRIVACY POLICY

The date of the last revision of the Privacy Policy is identified on the first page of the Privacy Policy. We reserve the right to update this policy, and if we make material changes to the way we handle users’ personal information, we will notify you via email. You are responsible for periodically visiting our website and reviewing our Privacy Policy for any changes.

CONTACT

You can email us to inquire about our Privacy Policy or to request access, correct, or delete any personal information you have provided to us at:

Andrea Padrón  
info@andreapadron.com

You may contact our Data Protection Officer by sending an email to info@andreapadron.com.

COMPLAINTS

If you wish to file a complaint or if you feel that our Company has not addressed your concern satisfactorily, you may contact the Information Commissioner’s Office (if you are a person located in the UK) or the European Data Protection Board.

PERSONS LOCATED IN THE UNITED KINGDOM

Restricted Transfers: Our Company may carry out a restricted transfer if the recipient is in a third country or territory or is an international organization covered by the UK’s “adequacy regulations.” If there are no adequacy regulations covering the country, territory, or sector for the restricted transfer, our Company must then find out if it can carry out the transfer subject to “appropriate safeguards” as listed in the UK GDPR. Before relying on an appropriate safeguard to make a restricted transfer, we must be sure that the transferred data subjects continue to enjoy a level of protection that is essentially equivalent to the UK’s data protection regime. To do so, we conduct a risk assessment, which considers the protections contained in that appropriate safeguard and the legal framework of the destination country (including laws governing public authorities’ access to data). If our assessment is that the appropriate safeguard does not provide the required level of protection, we will include additional measures. Appropriate safeguards may include: (1) A legally binding and enforceable instrument between public authorities or bodies; (2) binding corporate rules as defined in Article 47 of the UK GDPR; (3) a contract incorporating standard data protection clauses recognized or issued in accordance with the UK’s data protection regime; (4) a code of conduct approved by the ICO; (4) Certification under an approved certification scheme; (5) a bespoke contract governing a specific restricted transfer that has been individually authorized by the ICO; or (6) Administrative arrangements between public authorities or bodies. If none of the above criteria apply to the transfer, we may still make the transfer if it is covered by an “exception” set out in Article 49 of the UK GDPR.