Last updated: August 22, 2026
This Privacy Policy explains how Sergio Afonso (“we”, “us”, “our”) collects, uses, stores and protects personal information when you visit or use sergioafonso.com (the “Website”), create an account, purchase products, use our services, or otherwise interact with us.
We are committed to protecting your personal data and processing it in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Spanish data protection legislation.
Please read this Privacy Policy carefully.
1. Data Controller
The data controller responsible for your personal data is:
Name: Sergio Pimienta Afonso
Trading name: Sergio Afonso
Website: sergioafonso.com
Email: [email protected]
Country: Spain
For privacy-related questions or requests, you can contact us using the email address above.
2. Personal Data We Collect
Depending on how you interact with the Website, we may collect different categories of personal data.
2.1 Information you provide directly
When you create an account, place an order, contact us, subscribe to communications, or otherwise interact with the Website, we may collect:
- First and last name
- Email address
- Account login information
- Billing and transaction information
- Company information, where applicable
- Information contained in messages or support requests
- Information you voluntarily provide through forms
- Any other information you voluntarily submit to us
We do not intentionally request or collect special categories of personal data unless this is strictly necessary and permitted by applicable law.
2.2 Account information
If you create an account on the Website, we may process information associated with your account, including:
- Name
- Email address
- Account identifier
- Login-related information
- Purchase history
- Digital products associated with your account
2.3 Purchases and transactions
When you purchase a product through the Website, we may process information necessary to:
- Process and fulfil your order
- Provide access to purchased digital products
- Maintain transaction records
- Provide customer support
- Handle refunds, disputes or other transaction-related matters
- Comply with accounting and legal obligations
Payment information may be processed directly by third-party payment providers. We do not necessarily store complete payment card details on our own servers.
2.4 Information collected automatically
When you visit the Website, certain technical information may be collected automatically, including:
- IP address
- Browser type and version
- Device type
- Operating system
- Approximate geographic information
- Referring website or source
- Pages visited
- Date and time of visits
- Interaction information
- Technical and diagnostic information
The exact information collected depends on the services, plugins, cookies and analytics technologies enabled on the Website.
3. Google Sign-In
The Website may allow you to create or access an account using Google Sign-In.
If you choose to use Google Sign-In, Google may provide us with certain information associated with your Google account, such as:
- Name
- Email address
- Profile information made available through the authentication process
- Google account identifier
We use this information to create and authenticate your Website account and provide the requested functionality.
Google processes information in accordance with its own privacy policies and terms.
Your use of Google Sign-In is optional. You may create or use an account through other available authentication methods where provided.
4. How We Use Your Personal Data
We may use your personal data for the following purposes:
4.1 Providing our Website and services
We process personal data where necessary to:
- Operate and maintain the Website
- Create and manage user accounts
- Provide access to purchased products
- Deliver digital products
- Process orders
- Provide customer support
- Communicate with you regarding your account or orders
- Maintain Website security and functionality
4.2 Processing payments and orders
We process information necessary to complete purchases, maintain transaction records and provide customers with access to purchased products.
4.3 Website analytics and improvement
Where permitted by applicable law, we may use analytics and measurement technologies to understand how visitors use the Website and to improve:
- Website performance
- User experience
- Content
- Products
- Marketing effectiveness
This may include services such as Google Analytics, where enabled.
4.4 Security and fraud prevention
We may process technical and account information to:
- Detect and prevent abuse
- Protect accounts
- Detect fraudulent activity
- Prevent unauthorized access
- Protect the integrity of our Website and services
4.5 Legal and regulatory compliance
We may process personal data where necessary to:
- Comply with legal obligations
- Maintain legally required accounting and transaction records
- Respond to lawful requests from authorities
- Establish, exercise or defend legal claims
5. Legal Bases for Processing
Under the GDPR, we process personal data on one or more of the following legal bases:
Performance of a contract
We may process personal data where it is necessary to enter into or perform a contract with you, including when you:
- Create an account
- Purchase a product
- Request a service
- Require customer support related to a purchase
Legal obligation
We may process personal data where processing is necessary to comply with legal obligations, including accounting, tax and other applicable requirements.
Legitimate interests
We may process personal data where this is necessary for our legitimate interests, provided that these interests are not overridden by your rights and freedoms.
Examples may include:
- Website security
- Fraud prevention
- Maintaining and improving our services
- Protecting our legal rights
- Understanding Website performance
Consent
Where required by law, we will request your consent before processing personal data for specific purposes, such as certain analytics, marketing or non-essential cookies.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
6. Cookies and Similar Technologies
The Website may use cookies and similar technologies.
Cookies may be used for different purposes, including:
- Essential Website functionality
- Authentication and account management
- Shopping cart functionality
- Security
- Preferences
- Analytics
- Website performance
- Marketing, where applicable
Some cookies are strictly necessary for the operation of the Website and cannot be disabled through our cookie consent mechanism.
Where legally required, non-essential cookies will only be used after obtaining the appropriate consent.
You can manage cookies through our cookie consent mechanism, where available, and through your browser settings.
For more information about the specific cookies used on the Website, please refer to our Cookie Policy.
7. Google Analytics and Website Measurement
We may use Google Analytics and related Google services to understand how visitors interact with our Website.
These services may collect information such as:
- Pages visited
- Approximate location
- Device information
- Browser information
- Interaction events
- Traffic sources
- Website usage information
Analytics data is used to understand Website performance and improve our content, products and services.
Where required by applicable law, analytics technologies that are not strictly necessary will only operate after obtaining the appropriate consent.
Google may process data on our behalf or independently depending on the specific Google service and configuration.
For further information, please consult Google’s privacy documentation.
8. Google Search Console and Site Performance Tools
We may use Google Search Console and related tools to understand how our Website appears in search engines and to monitor technical Website performance.
These tools primarily provide aggregated or technical information about Website performance and search traffic.
Where personal data is processed through these services, such processing is governed by the applicable terms and privacy documentation of the relevant provider.
9. WooCommerce and User Accounts
The Website uses WooCommerce and WordPress functionality to provide online purchasing and account functionality.
When you create an account or purchase a product, information may be processed to:
- Create and maintain your account
- Process orders
- Record purchases
- Provide access to digital products
- Provide customer support
- Maintain transaction records
Your account information may remain stored for as long as your account is active or as necessary to provide the services associated with your account.
Certain transaction and financial information may need to be retained for longer periods where required by applicable law.
10. Digital Products
Products sold through the Website may include digital files, templates, workflows, documentation or other digital content.
When you purchase a digital product, we may process information necessary to:
- Confirm your purchase
- Provide access to the product
- Maintain your purchase history
- Prevent unauthorized access or abuse
- Provide updates or customer support where applicable
Digital products may be associated with your Website account or order history.
11. Third-Party Service Providers
We may use trusted third-party providers to operate and maintain parts of the Website and provide our services.
These providers may include providers for:
- Website hosting
- WordPress infrastructure
- Payment processing
- Authentication
- Analytics
- Email delivery
- Security
- Cloud storage
- Website performance
- Customer support
- Technical infrastructure
Where these providers process personal data on our behalf, we take reasonable steps to ensure that appropriate contractual and security measures are in place.
We do not sell your personal data.
12. International Data Transfers
Some of our service providers may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we will take appropriate measures to ensure that the transfer is carried out in accordance with applicable data protection law.
Depending on the circumstances, such safeguards may include:
- An adequacy decision by the European Commission
- Standard Contractual Clauses
- Other legally recognized transfer mechanisms
- Appropriate supplementary safeguards where required
Some third-party providers, including global technology providers, may operate infrastructure in multiple countries.
13. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention periods may vary depending on the type of information.
For example:
- Account information: generally retained while your account remains active and for a reasonable period thereafter where necessary.
- Order and transaction information: retained for as long as necessary to provide the service and comply with accounting, tax and legal obligations.
- Customer support communications: retained for as long as reasonably necessary to resolve the matter and maintain appropriate records.
- Analytics information: retained according to the configuration and retention settings of the relevant analytics service.
- Marketing information: retained until you withdraw consent or unsubscribe, unless another lawful basis for retention applies.
When personal data is no longer required, we may delete it, anonymize it or securely dispose of it.
14. Your Data Protection Rights
Under applicable data protection law, including the GDPR, you may have the following rights:
Right of access
You may request confirmation as to whether we process your personal data and request access to that data.
Right to rectification
You may request correction of inaccurate or incomplete personal data.
Right to erasure
You may request deletion of your personal data in certain circumstances.
Right to restriction
You may request restriction of processing in certain circumstances.
Right to object
You may object to certain processing activities, including processing based on legitimate interests and, where applicable, direct marketing.
Right to data portability
Where applicable, you may request to receive personal data you have provided to us in a structured, commonly used and machine-readable format, or request that it be transferred to another controller.
Right to withdraw consent
Where processing is based on your consent, you may withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
These rights are subject to the conditions and limitations established by applicable law.
The European Commission confirms that GDPR rights include access, rectification, erasure, restriction, portability and objection, with organizations generally required to respond to requests without undue delay and normally within one month.
15. How to Exercise Your Rights
To exercise any of your data protection rights, contact us at:
Email: [email protected]
Please include sufficient information to allow us to identify your request and, where necessary, verify your identity.
We will normally respond to valid requests within one month, unless an applicable legal exception or extension applies.
We may request additional information where reasonably necessary to verify your identity and protect your personal data from unauthorized disclosure.
16. Right to Lodge a Complaint
If you believe that your personal data has been processed unlawfully or that your data protection rights have not been respected, you have the right to lodge a complaint with the competent data protection supervisory authority.
In Spain, the relevant supervisory authority is the:
Agencia Española de Protección de Datos (AEPD)
You can find information about the AEPD and its procedures on its official website.
You may also have the right to lodge a complaint with the supervisory authority in the European Union Member State where you live, work or where you believe an infringement occurred.
17. Data Security
We take reasonable technical and organizational measures designed to protect personal data against:
- Unauthorized access
- Unauthorized disclosure
- Loss
- Destruction
- Alteration
- Accidental or unlawful processing
However, no Internet transmission or electronic storage system can be guaranteed to be completely secure.
We therefore cannot guarantee absolute security of personal information.
18. Children’s Privacy
The Website is not intentionally directed at children who are below the minimum age required to independently consent to data processing under applicable law.
We do not knowingly collect personal data from children for purposes that are not permitted under applicable law.
If you believe that a child has provided us with personal data without appropriate authorization, please contact us so that we can review and, where appropriate, delete the information.
19. Third-Party Websites
The Website may contain links to third-party websites, services or platforms.
We are not responsible for the privacy practices, security or content of third-party websites.
When you leave our Website, we recommend reviewing the privacy policy of the third-party website or service you visit.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes to our services
- Changes to the technologies used on the Website
- Changes to applicable legislation
- Changes to our data processing activities
When we make changes, we will update the “Last updated” date at the top of this page.
Where required by applicable law, we will provide additional notice or obtain consent for material changes.
21. Contact
If you have questions about this Privacy Policy, our processing of personal data, or your data protection rights, please contact us:
Sergio Afonso
Website: sergioafonso.com
Email: [email protected]
Country: Spain
22. Legal Information
This Privacy Policy is intended to provide transparent information about the processing of personal data associated with sergioafonso.com.
It does not limit any rights granted to individuals under applicable data protection legislation.
Where applicable, this Privacy Policy should be read together with our Cookie Policy, Terms and Conditions, and any other notices provided at the point where personal data is collected.
Last updated: August 22, 2026