Privacy policy
How we handle your personal data, in plain words.
Who is responsible
The controller of your personal data is Casa Breaze SL (NIF B24951725), Carrer de Viladomat 320, 08029 Barcelona, Spain, [email protected]. If you have any question about your data, write to us at that address.
What data we collect
We only collect what we need. Depending on how you interact with us, this can be:
- Contact data: your name, email address and, if you give it to us, your phone or WhatsApp number.
- Booking and payment data: what you booked, when, and payment confirmations. Card details are handled by our payment providers, never stored by us.
- Application data: what you tell us when you apply for a training or a 1:1 programme, such as your experience and motivation.
- Health information you share with us: before a breathwork session we may ask about conditions that matter for your safety, such as pregnancy, heart conditions or epilepsy. We only process this with your explicit consent and only to keep you safe.
- Communication: messages you send us by email, WhatsApp or through our forms.
- Technical data: when you visit our website, our hosting provider automatically processes data such as your IP address, browser and the pages you open, to deliver the site securely.
Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Registering you for a masterclass, session, event or training, sending you the joining link and reminders | Contract or steps before a contract (Art. 6(1)(b)) |
| Processing payments, invoices and accounting | Contract and legal obligations (Art. 6(1)(b) and (c)) |
| Our newsletter and information about upcoming offers | Your consent (Art. 6(1)(a)), which you can withdraw any time |
| Health information for your safety in sessions | Your explicit consent (Art. 9(2)(a)) |
| Answering your messages and enquiries | Our legitimate interest in replying to you (Art. 6(1)(f)) |
| Running a secure and working website | Our legitimate interest (Art. 6(1)(f)) |
Who we share it with
We never sell your data. We work with a small number of trusted service providers who process data on our behalf and under a data processing agreement:
- HighLevel (website hosting, forms, email and contact management)
- Zoom (live online sessions)
- WhatsApp / Meta (group chats and reminders, if you join or give us your number)
- Skool (our online community, if you become a member)
- Luma (event registration for some in-person events)
- Google (email, calendar, and fonts on this website) and YouTube (embedded videos, loaded only when you press play)
- Payment providers (for paid bookings)
- Our tax advisors and authorities, where the law requires it
Transfers outside the EU
Some of these providers are based in the United States. Where data is transferred outside the European Economic Area, it is protected by an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or by the European Commission’s standard contractual clauses.
How long we keep it
- Contact and booking data: as long as we are in contact, and then for as long as legal claims are possible.
- Invoices and accounting records: as long as tax law requires (in Spain, generally 6 years).
- Newsletter: until you unsubscribe.
- Health information: only as long as needed for the session or programme it was given for.
Cookies
Our website uses technically necessary cookies so that pages and forms work. If we use analytics or marketing tools in the future, we will only do so with your consent, which you can give or refuse in the cookie banner.
Your rights
You have the right to access your data, correct it, have it deleted, restrict or object to its processing, and receive it in a portable format. Where we rely on your consent, you can withdraw it at any time, without affecting what happened before.
Just write to [email protected]. You can also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD).
Security
We protect your data with appropriate technical and organisational measures, and only the people who need it for their work can access it.
Changes
We may update this policy when our services or the law change. The current version is always on this page.
Last updated: 14 October 2026