Privacy Policy.

Last updated: [PLACEHOLDER] (date of publication)

1. Data controller

The controller of your personal data is Gogotechy S.L. (legal company name), tax ID (CIF/NIF/VAT) ESB72545221, registered address [PLACEHOLDER], registered in the Mercantile Registry of [PLACEHOLDER]. Contact for privacy matters: info@gogotechy.com. Data Protection Officer, if appointed: [PLACEHOLDER].

2. What data we collect

• Account data: name, email address, password (stored encrypted), role or career interest, country.
• Purchase and billing data: programme purchased, amount, invoice details. Card data is processed directly by Stripe; we never store full card numbers.
• Programme data: course progress, interview practice sessions, submitted forms, applications and coaching notes.
• Usage and technical data: IP address, device and browser type, pages viewed, and cookie identifiers as described in our Cookies Policy.
• Communications: messages you send us through the contact form or by email.

3. Why we use it and legal basis

• To provide the service you bought (account, platform access, coaching, live sessions): performance of a contract.
• To take payment and issue invoices: performance of a contract and compliance with legal accounting obligations.
• To answer your enquiries: performance of a contract or our legitimate interest in responding to you.
• To send you service emails (access, reminders, changes): performance of a contract.
• To send marketing emails about our programmes: your consent, which you can withdraw at any time using the unsubscribe link.
• To measure and improve the site: your consent for analytics cookies.
• To prevent fraud and abuse and to defend legal claims: our legitimate interest and compliance with legal obligations.

4. Who we share data with

We share data only with providers that process it on our behalf under a data processing agreement:

• Stripe, payment processing and fraud prevention.
• Supabase, database, authentication and hosting of application data.
• Hosting and content delivery provider, serving this website.
• Email and analytics providers, transactional and marketing email, aggregated site statistics: [PLACEHOLDER].

Some providers may process data outside the European Economic Area. In that case transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision. We do not sell your personal data.

5. How long we keep it

Account and programme data are kept while your account is active and for up to 12 months after it is closed. Invoicing and tax records are kept for the legally required period (generally 6 years in Spain). Contact form messages are kept for up to 24 months. Marketing consents are kept until you withdraw them.

6. Your rights

You can request access to your data, rectification of inaccurate data, deletion, restriction of processing, portability, and you can object to processing based on legitimate interest or withdraw consent at any time. Write to info@gogotechy.com stating your request; we may ask you to confirm your identity and will reply within one month.

If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or the supervisory authority of your country of residence.

7. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls, least-privilege permissions and regular backups.

8. Minors

Our services are intended for people aged 18 or over. We do not knowingly collect data from minors.

9. Changes

We may update this policy. If changes are significant we will notify you by email or through the platform before they take effect.