Privacy policy

Privacy Policy

Website: valeriakechichian.com
Last updated: February 2026

This Privacy Policy explains how personal data is collected, used and protected when you visit this website or interact with our services.

1. Data Controller

The data controller responsible for this website is:

Valeria Kechichian
Email: valeria@valeriakechichian.com

For any privacy-related request, you may contact the email above.

2. What personal data we collect

We may collect the following categories of personal data:

Information you provide directly

  • Name

  • Email address

  • Any information you submit through forms or emails

  • Purchase and transaction details

Information collected automatically

When you visit the website, certain technical data may be collected:

  • IP address

  • Browser type and device information

  • Pages visited and interaction data

  • Referring website

This data is collected via Squarespace analytics and cookies (see Cookie Policy).

3. How we use your data (legal basis)

Under GDPR, we must have a legal basis for processing personal data.

Website operation and security

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)
We process data to ensure the website functions correctly and securely.

Email newsletters and updates

Legal basis: Consent (Art. 6(1)(a) GDPR)
When you subscribe, we use your name and email to send newsletters and updates.

You can unsubscribe at any time.

Purchases and payments

Legal basis: Contract (Art. 6(1)(b) GDPR)
When you purchase a product, your data is processed to complete the transaction.

Legal obligations

Legal basis: Legal obligation (Art. 6(1)(c) GDPR)
We may retain certain data for accounting or tax requirements.

4. Email marketing

We use ConvertKit LLC to manage email subscriptions.

ConvertKit processes:

  • Name

  • Email address

  • Interaction with emails (opens, clicks)

Privacy Policy: https://convertkit.com/privacy

You can unsubscribe anytime via the link in emails.

5. Purchases and payments

Purchases are processed through ThriveCart and payment processors.

ThriveCart

Privacy Policy: https://thrivecart.com/privacy/

Stripe Payments Europe Ltd

Privacy Policy: https://stripe.com/privacy

PayPal (Europe) S.à r.l. et Cie, S.C.A.

Privacy Policy: https://www.paypal.com/webapps/mpp/ua/privacy-full

We do not store full payment card details.

6. Website hosting and analytics

This website is hosted by Squarespace, Inc.

Squarespace may process:

  • Technical usage data

  • IP address

  • Website analytics

Privacy Policy: https://www.squarespace.com/privacy

7. Embedded content and external platforms

This website may include links or embedded content from:

  • YouTube (Google Ireland Ltd)

  • Instagram (Meta Platforms Ireland Ltd)

  • Spotify AB

  • Substack Inc.

These platforms may collect data when you interact with their content.
Please consult their privacy policies.

8. International data transfers

Some service providers are located outside the European Economic Area (EEA), particularly in the United States.

When this occurs, we rely on:

  • Standard Contractual Clauses (SCCs)

  • EU-approved safeguards

to ensure adequate data protection.

9. Data retention

We retain personal data only as long as necessary:

  • Email subscribers → until you unsubscribe

  • Customer purchase data → up to 7 years (legal/tax obligations)

  • Contact form emails → up to 24 months

  • Analytics data → up to 24 months

10. Your GDPR rights

You have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent at any time

To exercise your rights, email:
valeria@valeriakechichian.com

11. Right to lodge a complaint

If you believe your data is handled unlawfully, you may contact your local data protection authority.

If you are in the EU, you may lodge a complaint with the Spanish Data Protection Authority:

Agencia Española de Protección de Datos (AEPD)
https://www.aepd.es

12. Data security

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse or alteration.

13. Changes to this Privacy Policy

We may update this Privacy Policy when required by legal or operational changes.
The latest version will always be published on this page.