PRIVACY POLICY

Last updated: 11 October 2025

1. WHO WE ARE

This Privacy Policy explains how Tereza Barnard Studio S.L. (“Company”, “we”, “us”, or “our”) collects, uses, and protects your information when you visit https://www.therealistacademy.com and any related products, services, or communications (together, the “Services”).

Company details:
Tereza Barnard Studio S.L.
CIF: B22966972
Carrer de Sant Miquel 30, 5ºA, Distrito Centro, 07002 Palma, Illes Balears, Spain
Email: studio@terezabarnard.com

We are the data controller for personal information collected through this Site.

2. INFORMATION WE COLLECT

We collect information you provide directly and automatically through your use of the Services.

A. Information you provide:

  • Contact details (name, email, billing/shipping address, phone).

  • Account login details if you create an account.

  • Payment information (processed securely by Stripe, PayPal, or Squarespace Payments; we do not store full card details).

  • Purchase history, course enrollments, and communication preferences.

  • Content you share (comments, posts, or uploaded files).

  • Support or customer service messages.

B. Information collected automatically:

  • Log data (IP address, browser type, device information, access times).

  • Cookies and similar technologies (see Section 8).

  • Approximate location (country/region level) inferred from IP.

C. Information from third parties:

  • Payment processors (transaction status, fraud prevention signals).

  • Advertising and analytics partners (Meta, Google, ConvertKit) with your consent or under legitimate interest.

3. HOW WE USE YOUR INFORMATION

We process personal data for the following purposes:

  1. To provide, operate, and maintain our Services.

  2. To process payments, send invoices, and manage your orders.

  3. To deliver digital content, courses, and updates.

  4. To communicate with you (customer service, technical notices, marketing emails if opted in).

  5. To improve our products, website performance, and user experience.

  6. To comply with legal obligations (tax, accounting, fraud prevention).

  7. For advertising or analytics, where consent is given.

4. LEGAL BASES FOR PROCESSING (EU/UK USERS)

We process your personal data under the following legal bases:

  • Contract performance (providing purchased products or courses).

  • Consent (email marketing, cookies, optional forms).

  • Legitimate interest (analytics, site security, direct communication about similar services).

  • Legal obligation (tax, accounting, anti-fraud).

You may withdraw consent at any time by emailing studio@terezabarnard.com or using unsubscribe links in our emails.

5. MARKETING COMMUNICATIONS

If you subscribe or purchase, we may send you marketing emails about related courses or updates.
You can unsubscribe at any time by clicking the link in any email or contacting us directly.
We never sell or rent your contact details.

We may use anonymised or aggregated customer lists (e.g., hashed emails) with advertising partners like Meta or Google for lookalike or retargeting campaigns, only where consent has been given in the EU/UK, or consistent with opt-out rights in the U.S. (see Section 10).

6. HOW WE SHARE INFORMATION

We only share personal data when necessary:

  • Payment processors: Stripe, PayPal, Squarespace Payments (secure transactions).

  • Email marketing platform: ConvertKit.

  • Analytics & advertising: Google Analytics, Meta Ads, and similar tools (with consent).

  • Professional service providers: accountants, legal advisors, shipping carriers.

  • Authorities: when required by law (tax, customs, anti-fraud).

All processors are contractually bound to handle data securely under GDPR-compliant agreements.

7. INTERNATIONAL DATA TRANSFERS

We store and process most information in the European Union (Spain).
When we use service providers in countries outside the EU/EEA (e.g., the United States), we rely on:

  • Adequacy decisions (where applicable), or

  • Standard Contractual Clauses approved by the European Commission, ensuring equivalent data protection.

By using our Services, you consent to such transfers.

8. COOKIES & TRACKING TECHNOLOGIES

Cookies help us operate our Site and understand visitor interactions.

  • Essential cookies: necessary for site functionality and security.

  • Analytics cookies: help us understand performance (e.g., Google Analytics).

  • Advertising cookies: used by Meta, Google Ads, etc., for remarketing or audience insights (used only with consent in the EU/UK).

You can manage cookie preferences at any time through our Cookie Policy or browser settings.

9. DATA RETENTION

We retain personal data only as long as necessary to fulfil the purposes described here:

  • Orders, invoices, and payment records: 10 years (tax law).

  • Email marketing data: until you unsubscribe or request deletion.

  • Course accounts: while active, and for up to 2 years of inactivity.

  • Cookies and analytics data: typically 12–24 months.

We securely delete or anonymise data when no longer required.

10. YOUR RIGHTS

A. EU/UK residents:

You have the right to:

  • Access your personal data.

  • Rectify inaccurate data.

  • Request deletion (“right to be forgotten”).

  • Restrict or object to processing.

  • Withdraw consent at any time.

  • Request data portability.

Contact: studio@terezabarnard.com. We will respond within 30 days.
You also have the right to lodge a complaint with your local data protection authority (e.g., AEPD in Spain, ICO in the UK).

B. U.S. residents:

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA/CPRA):

  • Right to know what personal information we collect and how we use it.

  • Right to delete personal information (with some exceptions).

  • Right to correct inaccurate information.

  • Right to opt out of the sale or sharing of personal information.

  • Right not to be discriminated against for exercising your rights.

We do not sell personal data as defined under CCPA.
You can exercise these rights by emailing studio@terezabarnard.com with the subject “CCPA Request”.
If you use a Global Privacy Control (GPC) signal, we will honour it where technically supported.

11. DATA SECURITY

We use SSL encryption, secure payment processors, and access controls to protect personal data.
While no system is 100% secure, we take reasonable measures to prevent unauthorised access, alteration, or disclosure.

12. THIRD-PARTY LINKS

Our Site may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies before providing personal data.

13. CHILDREN’S PRIVACY

Our Services are not directed to children under 18. We do not knowingly collect data from minors. If we become aware that data has been collected from a minor, we will delete it promptly.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. The “Last updated” date will reflect the latest version. We encourage you to review it regularly.

15. CONTACT

For questions, data requests, or privacy concerns, contact:
Tereza Barnard Studio S.L.
Carrer de Sant Miquel, 30, 5ºA, Distrito Centro, 07002 Palma, Illes Balears, Spain
Email: studio@terezabarnard.com