Privacy policy
Last updated: 15 October 2026
This policy explains how Nosara handles personal data on nosaraskin.com. We keep it short because we collect very little.
Who is responsible
The data controller is Maria Jeanina Alfaro Solano (sole proprietorship, enskild firma), trading as Nosara, organisation number 19920929-2185, Kärrsbackevägen, 46375 Hjärtum, Sweden. Contact: geannina.alfaro@nosaraskin.com.
What we collect and why
- Email address when you join the community list. Purpose: to send you our short emails (2–3 per week) with skincare tips and lessons, and news about gatherings. Legal basis: your consent (GDPR Art. 6.1.a). You can withdraw it at any time.
- Booking details when you book a gathering: your full name, email address and phone number, collected through Stripe at checkout. We use your name to know who is booking and, where needed, to personalise materials; your email to coordinate details and tell you which ingredients we will use; and your phone number only to send you last-minute notifications about the gathering, if needed. Legal basis: contract (GDPR Art. 6.1.b). Stripe collects these details on our behalf and passes them to us.
- Payment details: handled entirely by Stripe, which also keeps accounting records for us. Legal basis: contract and legal obligation (Art. 6.1.b and 6.1.c). We never see or store your card number.
- Allergy and skin-sensitivity information, which you give us by email or by replying to our confirmation email. This is health-related information. We use it only to prepare the gathering safely, and we process it only with your explicit consent (Art. 9.2.a), which you give by sending it to us. You can withdraw consent at any time. We keep it until the gathering has taken place and then delete it.
- Messages you send us, such as questions about a home gathering, to reply to you.
Who we share data with
- Netlify, which hosts this website.
- Formspree, which receives the email address you enter in the sign-up form and forwards it to us.
- Stripe, which processes payments and collects your name, email and phone number at checkout.
- Google Fonts, which serves the typefaces on this site; your IP address is sent to Google when the page loads.
Some of these providers are based outside the EU/EEA and transfer data under approved safeguards such as the EU Standard Contractual Clauses. We do not sell your data.
Cookies
This website does not set advertising or tracking cookies and does not use analytics.
How long we keep data
Email list: until you unsubscribe. Booking details (name, email, phone): until the gathering has taken place, except for what Swedish bookkeeping law requires us to keep (currently seven years). Messages: until the matter is resolved, then deleted.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive a copy of it. To use these rights, email geannina.alfaro@nosaraskin.com. You can also complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
Photos
We only photograph or publish pictures of participants with their permission. Ask us to remove a photo at any time.