Privacy Policy

Last Update: October 28, 2025

Introduction

Thank you for visiting www.simondelosrios.com I take data protection seriously and handle your personal data. This Privacy Policy informs you about how your personal data is processed when you visit my website or work with me as a coaching or consulting client.

Privacy Statement 

This Privacy Statement explains how I process information that identifies you as an individual or relates to you as an identifiable individual. This is “personal data”. I, Simon De Los Rios, am the controller for the processing of personal data. I process personal data if you sign up for my newsletter, engage me for my services, or otherwise interact with me (e.g., through my social media pages or when you attend an event or webinar) as described below.  

I need to collect personal data in order to provide the requested services to you (such as to send you my newsletter). If you do not provide the information requested, I may not be able to provide the services. If you disclose any personal data relating to other people to me, you represent that you have the authority to do so and to permit me to use the information in accordance with this Privacy Statement. 

Description of Processing

I process personal data of my clients for purposes of providing my services to them. 

I process your name, email, phone number, address, payment information (e.g., invoice information, payment date and amount, bank account through which the payment was made), information about the services provided to you (e.g., as included in our contract or otherwise). I also process any information that you choose to provide to me, if it’s relevant to the services I’m providing to you (e.g., notes of our coaching sessions or email communications). 

I process your personal data to perform my contract with you, or if I have a legitimate interest.

Disclosures of personal data 

I disclose personal data to my (IT) service providers and related infrastructure service providers (including email delivery service providers, invoicing software). These may include marketing/CRM platforms and providers of services such as website hosting, payment processing, order fulfillment, and fraud prevention.

Other uses and disclosures 

I may also use and disclose your personal data as necessary or appropriate, in particular when I have a legal obligation or legitimate interest to do so: 

• To comply with applicable law and regulations. 
• This may include laws outside your country of residence. 
• To cooperate with public and government authorities. 
• To respond to a request or to provide information I believe is necessary or appropriate. 
• These can include authorities outside your country of residence. 
• To cooperate with law enforcement. 
• For example, when I respond to law enforcement requests and orders or provide information I believe is important. 
• For other legal reasons. 
• To enforce my terms and conditions; and 
• To protect your, my, or othersʼ rights, privacy, safety or property. 

Security 

We seek to use reasonable organizational, technical, and administrative measures to protect personal data within our organization. Unfortunately, no data transmission or storage system can guarantee 100% security. If you have reason to believe that your personal data with us is no longer secure, please notify us immediately in accordance with the “Contact” section below. 

Individuals’ Rights 

You have certain rights under the General Data Protection Regulation in relation to my processing of your personal data. These rights are listed below and are subject to conditions and exceptions in accordance with the GDPR and national implementation laws. You may: 

• Request access to your personal data; 
• Request me to correct or update your personal data; 
• Request me to restrict the processing of your personal data; 
• Request me to delete your personal data; 
• Request a copy of your personal data for purposes of transmitting it to another company; 
• Object to my processing of your personal data; 
• Withdraw your consent (which will not affect the lawfulness of processing prior to the withdrawal); 
• Lodge a complaint with an EU/EEA data protection authority for your country or region where you have your habitual residence or place of work or where an alleged infringement of applicable data protection law occurs. A list of data protection authorities is available here. 

You can submit your request by contacting simondelosrios(at)gmail.com and I will provide you with a response within one month. 

Retention period 

I will retain your personal data for the period necessary to fulfill the purposes outlined in this Privacy Statement unless a longer retention period is required or permitted by law, for example, for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.  

The criteria used to determine my retention periods include (i) the length of time I have an ongoing relationship with you (for example, for as long as you are my client); (ii) whether there is a legal obligation to which I am subject (for example, certain laws require me to keep invoicing records for a certain period of time before I can delete them); or (iii) whether retention is advisable in light of my legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations). 

Third party services 

This Privacy Statement does not address, and I am not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any website or service to which we link. The inclusion of a link does not imply endorsement of the linked site or service by me. 

Jurisdiction and cross-border transfer 

Your personal data may be stored and processed outside of the European Economic Area (EEA). For such transfers, I ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented: 

• Adequacy Decisions: Some non-EEA countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these countries is available here). 
• Standard Contractual Clauses: For transfers of personal data from the EEA to third countries where personal data is transferred, which are not considered adequate by the European Commission, we have put in place standard contractual clauses adopted by the European Commission to protect your personal data. You may obtain a copy of these measures by contacting us in accordance with the “Contacting Us” section below or by following this link. 

Updates to this Privacy Statement 

The “Last Updated” legend at the top of this Privacy Statement indicates when this Privacy Statement was last revised. Any changes will become effective when I post the revised Privacy Statement on the website. 

Contact 

If you have any questions about this Privacy Statement, please contact me at simondelosrios(at)gmail.com

Because email communications are not always secure, please do not include credit card or other sensitive information in your emails to me.