Privacy Policy

Spain Specialist ("we," "us," or "our") operates the website spainspecialist.com, including all associated services such as the AI hotline, chatbot, eligibility assessment, and digital products. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

1. Information We Collect

We collect information in several ways depending on how you interact with us.

Information You Provide Directly

• Contact forms: Name, email address, phone number (optional), and message content when you submit a contact form on our website.
• Email signup: Email address and optionally first name when you sign up for our newsletter or request the free guide.
• Eligibility assessment: Income information, employment type, family situation, and timeline preferences you enter to receive your eligibility score. This information is pseudonymized — it is used to generate your report and is not linked to personally identifying information unless you choose to provide your email address.
• Purchase information: When you purchase the €1 Eligibility Assessment or the €99 Action Bundle, payment is processed by Stripe. We do not receive or store your full card number. We receive a transaction confirmation, the last four digits of your card, and the email address associated with your payment.
• AI hotline and chatbot interactions: Voice calls and chat conversations with our AI services may be recorded or logged for quality assurance, safety monitoring, and service improvement purposes. Call recordings are processed by ElevenLabs and stored in accordance with their data retention policies.

Information Collected Automatically

• Usage data: Pages visited, time spent on pages, referring URL, browser type, operating system, and approximate location (country/city level based on IP address).
• Cookies and similar technologies: We use cookies and localStorage to remember your preferences, maintain session state, and analyze site usage. See Section 7 (Cookie Policy) for details.
• Log data: Server logs may record your IP address, browser agent, and page requests. Log data is retained for a maximum of 90 days.

2. How We Use Your Information

We use the information we collect to:

• Provide and improve our services, including the AI hotline, chatbot, eligibility assessment, and digital products
• Respond to your messages, questions, and support requests
• Send you the free guide and any resources you've requested
• Send email newsletters and updates (only if you've opted in; you can unsubscribe at any time)
• Process payments and deliver purchased products
• Analyze usage patterns to improve the website and services
• Comply with legal obligations
• Detect and prevent fraud or abuse

We do not sell your personal information to third parties. We do not use your information for targeted advertising.

3. Third-Party Services

We use the following third-party services to operate our platform. Each has its own privacy policy governing the data they process on our behalf.

ElevenLabs

Our voice AI hotline is powered by ElevenLabs. Voice conversations may be processed and temporarily stored on ElevenLabs' servers for the purpose of generating real-time voice responses. We have a data processing agreement with ElevenLabs. Learn more: elevenlabs.io/privacy

ConvertKit (now Kit)

We use ConvertKit to manage our email newsletter and deliver digital products. When you sign up for our email list or purchase a product, your name and email address are stored in ConvertKit. You can unsubscribe at any time using the link in any email. Learn more: kit.com/privacy

Stripe

Payment processing for our paid products is handled by Stripe. When you make a purchase, you interact directly with Stripe's secure checkout. We receive only a payment confirmation and partial card information. Your full card details are never transmitted to or stored by us. Learn more: stripe.com/privacy

Twilio

Our SMS notifications and certain phone routing functions use Twilio. Phone numbers used to call our hotline may be temporarily logged by Twilio's systems. Learn more: twilio.com/legal/privacy

Analytics

We use privacy-respecting analytics to understand how visitors use our website. Analytics data is aggregated and anonymized — we cannot identify individual visitors from analytics data.

4. Data Storage and Security

Your data is stored on servers located in the United States and/or the European Union, depending on the service. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all data transmission
• Access controls limiting who can access personal data
• Regular security reviews
• Data minimization — we only collect what we need

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy:

• Contact form submissions: 2 years, or until you request deletion
• Email subscribers: Until you unsubscribe or request deletion
• Purchase records: 7 years (required for tax and accounting purposes)
• Assessment data: 1 year, then anonymized or deleted
• Call/chat logs: Per ElevenLabs' and Twilio's retention policies, typically 30–90 days
• Server logs: 90 days maximum

6. Your Rights Under GDPR and CCPA

Depending on where you are located, you may have the following rights regarding your personal data:

For Users in the European Economic Area (GDPR)

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate personal data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restriction: Request restriction of processing of your personal data
• Right to data portability: Receive your personal data in a structured, machine-readable format
• Right to object: Object to processing of your personal data for certain purposes
• Right to withdraw consent: Withdraw consent where processing is based on consent (e.g., marketing emails)

For Residents of California (CCPA)

• Right to know: Request information about the categories and specific pieces of personal information we collect about you
• Right to delete: Request deletion of personal information we have collected
• Right to opt out of sale: We do not sell personal information, so this right is not applicable, but you have it regardless
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise any of these rights, please contact us at privacy@spainspecialist.com or write to us at the address below. We will respond to verified requests within 30 days (GDPR) or 45 days (CCPA).

7. Cookie Policy

Our website uses cookies and similar technologies. Here is what we use and why:

Strictly Necessary Cookies

These cookies are required for the website to function and cannot be switched off. They include session cookies that remember your login state and preferences during a single visit. These are set automatically and do not require consent.

Analytics Cookies

We use anonymous analytics to understand how visitors use our site — which pages are popular, where traffic comes from, and how to improve the experience. These cookies do not identify you personally.

Preference Cookies

These cookies remember your preferences (such as whether you've dismissed a notice or completed the assessment) to improve your experience on return visits.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect site functionality. We do not use advertising, tracking, or retargeting cookies.

8. Children's Privacy

Our services are not directed at or intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected information from a child under 16, please contact us immediately and we will delete it.

9. Links to External Websites

Our website may contain links to third-party websites (such as Spanish government resources, recommended professional services, or reference articles). We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any site you visit.

10. International Data Transfers

As a service operated from the United States serving users globally (including Spain and the EU), personal data may be transferred to and processed in countries outside your country of residence. When we transfer data from the EU/EEA to the US, we do so under appropriate safeguards, including Standard Contractual Clauses where applicable.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and notify active email subscribers. Your continued use of our services after any changes constitutes acceptance of the updated policy.

12. Contact Us

For questions, concerns, or data requests related to this Privacy Policy, please contact us:

• Email: privacy@spainspecialist.com
• General contact: hello@spainspecialist.com
• Website: spainspecialist.com/contact

We take privacy concerns seriously and will respond to all legitimate requests promptly.