Privacy Policy
Last updated: 27 October 2026
This policy explains which personal data we process when you visit https://yumi-digital.es and buy from us, why, for how long, and what rights you have under the EU General Data Protection Regulation (GDPR).
1. Who is responsible
The controller is YUMI DIGITAL, S.L. (Yumi Digital), C/ Castrillo de Aza 3, 8º B, 28031 Madrid, Spain, registration number M-879402, Registro Mercantil de Madrid. Contact for all privacy questions: info@yumi-digital.es, phone +34 662 576 780.
2. In short
- No cookies are set by this website. There is no analytics, no tracking, no advertising pixel and no social media plugin.
- No third-party fonts, scripts or CDNs are loaded: every file comes from our own server.
- Nothing is stored in your browser by this website (no cookies, no local storage).
- You pay on a payment page hosted by Stripe. We never receive your full card details. We receive the order details from Stripe.
- We use your data only to deliver your order, keep legally required records and protect the website.
3. What we process and why
| Data | Purpose | Legal basis (GDPR) | How long |
|---|---|---|---|
| Server logs at our host: IP address, date and time, requested page, browser type, referring page | Delivering the website, security, finding errors | Legitimate interest, Art. 6(1)(f) | Kept by the hosting provider for a limited period under its log rotation, then deleted |
| Order data you enter on the Stripe payment page and that Stripe passes to us: name, email, billing country or address, product bought, amount, Stripe payment and receipt ids, VAT number if you give one | Making and delivering the contract, sending access links and scheduling sessions, refunds, accounting | Contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c) | For the period required by the tax and accounting law of Spain; delivery emails are deleted when no longer needed |
| Emails and messages you send us, session notes | Answering you, providing sessions and support | Contract, Art. 6(1)(b); legitimate interest, Art. 6(1)(f) | For as long as needed to handle your order and any follow-up questions, and longer only where the law requires it |
You do not have to give us personal data, but without your name and email we cannot sell and deliver a product.
4. Service providers who receive data
Stripe (payments)
The payment button on a product page is a link to a payment page operated by Stripe (a Stripe Payment Link); our website sends no personal data to Stripe. On that page you give Stripe your name, email, billing details and payment details. Stripe processes the payment, sends you the receipt, performs fraud checks and makes the order details (without full card details) available to us in our Stripe account and in Stripe's payment notifications to us. For payment processing Stripe acts as our processor; for its own legal obligations and fraud prevention it acts as an independent controller. The Stripe payment page may use cookies under Stripe's own privacy policy, available at stripe.com/privacy.
Hostinger (hosting and email)
The website, its server logs and our email mailboxes (for example the emails you send us and the access and scheduling emails we send you) are hosted by Hostinger, our hosting provider, as our processor. Our website itself does not process payments or orders: it is a set of static pages with no forms and no database.
Course platform
Course materials are provided on our online learning platform. To give you access we share your name and email with this provider.
Video calls
For sessions we use a video call service named in the invitation. It processes the data needed for the call under its own privacy terms.
Processing outside the EU
Stripe and Hostinger may process data outside the EU under the safeguards described in their own privacy policies.
We do not sell or rent your data and we do not use it for advertising.
5. Cookies and local storage
This website sets no cookies and stores nothing in your browser (no local storage or similar browser storage). There is no analytics and no tracking. The consent boxes on product pages are not saved anywhere; they only enable the payment button on that page. Cookies set by Stripe on its own payment page are covered by Stripe's privacy policy.
6. Your rights
Under the GDPR you have the right to:
- get access to your data and a copy of it (Art. 15);
- have incorrect data corrected (Art. 16);
- have your data deleted, unless we must keep it by law (Art. 17);
- restrict processing (Art. 18);
- receive your data in a portable format (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- complain to a data protection supervisory authority, in particular in the country where you live or work, or in Spain.
To use your rights, email info@yumi-digital.es. We reply within the time limits set by data protection law. We do not use automated decision-making or profiling.
7. Security
The whole website is served over HTTPS. Card details are entered only on Stripe's page.
8. Children
Our products are intended for businesses and adults. We do not knowingly process data of children.
9. Changes
We update this policy when our processing changes. The current version and its date are always on this page.