Privacy Policy

At WIP (Wellness in Paradise), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, book our services, or interact with us.

Who We Are

WIP is a wellness community operating in Maspalomas, Gran Canaria, Spain. We offer yoga classes, workshops, retreats, and related wellness services.

For the purposes of data protection law, WIP is the data controller responsible for your personal information.

Purpose of This Policy

This Privacy Policy describes:

• What personal data we collect
• How we collect it
• Why we collect it
• How we use it
• How long we keep it
• Your rights regarding your data

Legal Basis for Processing

We process your personal data under one or more of the following legal bases:

• Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g., subscribing to our newsletter).
• Contract: Processing is necessary for a contract we have with you (e.g., booking a class or workshop).
• Legal Obligation: Processing is necessary for us to comply with the law (e.g., tax and accounting records).
• Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests.

Age Restrictions

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from children under 18. If you are under 18, please do not provide us with any personal information. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information.

Information We Collect

We may collect and process the following types of personal data:

• Contact Information: Name, email address, phone number, mailing address.
• Account Information: Username, password, profile preferences.
• Payment Information: Credit/debit card details, billing address (processed securely by our payment processor).
• Health and Wellness Information: Information you provide about your health, fitness level, injuries, or dietary preferences (only when relevant to delivering our services safely and effectively).
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.

How We Use Your Information

We use your personal data for the following purposes:

• To provide and manage our services (classes, workshops, retreats, memberships)
• To process payments and manage bookings
• To communicate with you about your bookings, upcoming events, and service updates
• To send you marketing communications (only if you have consented)
• To improve our website and services
• To comply with legal obligations (e.g., tax, accounting)
• To protect our rights and prevent fraud

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Active Accounts: Data is retained while your account is active.
• Legal Obligations: Financial and tax-related data is kept for 6 years in compliance with Spanish law.
• Marketing Consent: If you have consented to marketing, we will retain your contact details until you withdraw consent.

After these periods, we will securely delete or anonymize your data.

Data Sharing and Disclosure

We do not sell your personal data. We may share your data with:

• Service Providers: Payment processors, email service providers, hosting providers (who process data on our behalf under strict confidentiality agreements).
• Legal Authorities: If required by law or to protect our legal rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner.

All third-party processors are required to comply with GDPR and Spanish data protection law.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include encryption, access controls, and secure servers.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Your Rights

Under GDPR and Spanish data protection law, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restriction: Request that we limit how we use your data.
• Right to Data Portability: Request a copy of your data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: If we process your data based on consent, you can withdraw it at any time.
• Right to Lodge a Complaint: You have the right to complain to the Spanish Data Protection Authority (AEPD) if you believe we have not handled your data properly.

To exercise any of these rights, please contact us at support@wip.care or use the contact details provided below.

Complaints

If you have a complaint about how we handle your personal data, you may contact the Spanish Data Protection Authority:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6, 28001 Madrid, Spain
Phone: +34 91 266 35 17
Website: www.aepd.es

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically.

Governing Law

This Privacy Policy is governed by the laws of Spain and the European Union's General Data Protection Regulation (GDPR).