Legal
Privacy Policy
Last updated: 8 August 2026
This Privacy Policy explains how KarenMariaGlobal (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit karenmariaglobal.com (the “Site”) or contact us. We are committed to handling your data in line with the EU General Data Protection Regulation (GDPR) and, where relevant, the UK GDPR and Data Protection Act 2018.
Who We Are
KarenMariaGlobal is a self-employed holistic beauty and wellness practice based in San Miguel de Tenerife, Spain. For the purposes of data protection law, KarenMariaGlobal is the data controller responsible for your personal data.
Contact: info@karenmariaglobal.com
Information We Collect
We collect very little personal data, and only what you choose to give us. We do not run user accounts, process payments online, run a newsletter, or store bookings in a database.
Contact Form
When you submit our contact form, we collect your name, email address, and the message you write. This information is sent directly to our inbox by email so we can reply to you. It is not stored in a database on our Site.
Analytics Data
If you accept analytics cookies, Google Analytics collects information about how you use the Site, such as pages viewed, time on site, and general location (derived from IP address). See our Cookie Policy for details. We also use Vercel Web Analytics and Speed Insights, which are cookieless and do not identify individual visitors; these run regardless of your cookie choice because they do not use tracking identifiers.
Server Logs
Our hosting provider, Vercel, automatically records basic technical information (such as IP address, browser type, and request timestamps) for security, performance, and fraud-prevention purposes. This is standard practice for any website and is not used to build a profile of you.
How We Use Your Information
| Purpose | Legal basis |
|---|---|
| Responding to your contact form enquiry | Your consent, and our legitimate interest in replying |
| Understanding how visitors use the Site (Google Analytics) | Your consent (cookie banner) |
| Cookieless, aggregate site performance (Vercel Analytics) | Our legitimate interest in keeping the Site fast and reliable |
| Keeping the Site secure and preventing abuse | Our legitimate interest |
Third-Party Services We Use
- Resend, our email delivery provider, processes the contact form data solely to deliver your message to us and send you a confirmation email.
- Vercel hosts the Site and provides cookieless web analytics and performance monitoring.
- Google Analytics is only loaded after you accept our cookie banner. See the Cookie Policy.
- Google Fontsare downloaded once at build time and served from our own domain via Next.js. Your browser never contacts Google's servers to load fonts, so no data is shared with Google through font loading.
- Google Search Console helps us understand how the Site appears in Google Search results. It does not collect personal data about individual visitors to the Site.
- WhatsApp: buttons and links that open a WhatsApp chat take you to a service operated by WhatsApp Ireland Limited (Meta). Once you are in WhatsApp, Meta's own privacy policy applies to that conversation.
- Instagram: if we embed an Instagram feed on the Site in future, that embed will load content from Meta and may set its own cookies. We will update this policy before enabling it.
Some of these providers are based outside the UK and EEA (for example, in the United States). Where that is the case, we rely on appropriate safeguards recognised under GDPR, such as Standard Contractual Clauses or an equivalent adequacy framework, to protect your data when it is transferred.
Data Retention
Contact form emails are kept in our inbox only for as long as reasonably needed to respond to you and keep a record of the conversation, and are deleted when no longer needed. We do not keep a separate database of enquiries. Analytics data, where you have consented to it, is retained by Google Analytics according to Google's own retention settings, which we have configured to the shortest practical period.
Your Rights Under GDPR
You have the right to:
- Access the personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your data
- Restrict or object to how we use your data
- Receive your data in a portable format
- Withdraw consent at any time (for example, via Cookie Preferences)
- Lodge a complaint with a supervisory authority: the Spanish Data Protection Agency (AEPD) if you are in Spain or the EU, or the UK Information Commissioner's Office (ICO) if you are in the UK
To exercise any of these rights, email info@karenmariaglobal.com. We will respond within one month.
Children
Our services are intended for adults. We do not knowingly collect personal data from children.
Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page shows when it was last revised.
Contact Us
For any privacy questions, email info@karenmariaglobal.com or use our contact form.