Privacy Policy

This Privacy Policy explains how Laura Larrégola Psicología processes your personal data when you browse this website, contact us, request information, or engage our perinatal coaching and support services. Processing is carried out in accordance with the GDPR (Regulation (EU) 2016/679) and the applicable Maltese data protection framework.

1. Data controller

• Owner: Laura Larrégola Clavería (Laura Larrégola Psicología)
• Tax/ID number: 0168795A
• Address: 110 The Strand, Block D, SLM 1020 Sliema, Malta
• Phone: +34 686 315 794
• Email: contacto@lauralarregolapsicologia.com

2. Personal data we process

Depending on how you use this website, we may process:

• Contact data: name, email, phone number and message content provided through forms, email or WhatsApp.
• Browsing data: IP address, device identifiers, browser type, pages visited and usage metrics (depending on cookie settings).
• Service-related data: information needed to manage coaching and support sessions, scheduling and follow-up communications.

Note: this service is perinatal coaching and support, not a clinical psychology or healthcare service. We do not process health data within the meaning of Art. 9 GDPR as part of this activity.

3. Purposes of processing

We process your data to:

• Respond to enquiries received via email, forms or WhatsApp.
• Manage session requests, scheduling and related communications.
• Provide coaching and perinatal support services, including workshops, and related administrative tasks.
• Send informational communications about services, workshops or resources (only with your prior consent).
• Security: prevent abuse, fraud and cyber-attacks on the website.
• Legal compliance and handling of any claims or disputes.

4. Legal basis

The legal bases for processing include:

• Consent (Art. 6(1)(a) GDPR) — for contact forms, informational communications and cookies.
• Contract / pre-contractual measures (Art. 6(1)(b) GDPR) — to manage and deliver coaching and support services.
• Legal obligation (Art. 6(1)(c) GDPR) — for tax, accounting or other mandatory duties.
• Legitimate interests (Art. 6(1)(f) GDPR) — website security and misuse prevention.

5. Retention periods

We retain personal data for as long as necessary to fulfil the purpose for which it was collected. Afterwards, data may be blocked and kept only to meet legal obligations and limitation periods as required by applicable law.

• Enquiries: until resolved, and for the additional period required to address any legal liabilities.
• Sessions and services: for the duration of the professional relationship and the legally required retention periods thereafter.
• Informational communications: until you unsubscribe or withdraw your consent.

6. Recipients and processors

We may disclose data to:

• Public authorities, courts and competent bodies when legally required.
• Service providers acting as data processors under a binding contract that ensures GDPR compliance.

The main providers currently acting as data processors are: Hostinger (web hosting), Google Workspace (communications) and WPForms (contact forms). This list may be updated if the tools we use change.

7. International transfers

As a general rule, we do not carry out international transfers of data. However, some technology service providers may be located outside the European Economic Area (EEA). In that case, appropriate safeguards under the GDPR will apply, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions.

8. Your rights

You can exercise the following rights free of charge:

• Access, rectification, erasure ("right to be forgotten")
• Restriction of processing, objection to processing
• Data portability (where technically applicable)
• Withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise your rights, email contacto@lauralarregolapsicologia.com with the subject "DATA PROTECTION". We may request proof of identity where necessary.

If you believe your rights have not been properly addressed, you may lodge a complaint with the competent supervisory authority: Malta Information and Data Protection Commissioner (IDPC): idpc.org.mt

9. Accuracy of data

You confirm that the information provided is true, accurate, complete and up to date. If you provide third-party data, you confirm you have their prior consent and will inform them about the processing.

10. Security measures

We apply reasonable technical and organisational measures to protect your data against loss, unauthorised access, alteration or disclosure. However, no digital transmission or storage system is completely infallible.

11. Minors

This website and its services are not intended for anyone under 18 years of age. If you are underage, do not submit personal data without the express consent of your parents or legal guardians.

12. Changes

We may update this policy to reflect changes in legislation, case law, or the website itself. We recommend reviewing it periodically. The date of the last update is indicated at the top of this document.