Privacy notice
A plain-language summary of information used by this website.
Who is responsible
The data controller is Alina Toma, trading as SOFTSPOKEN, Fernando Vizcaíno Casas 14, 28023 Madrid, Spain. Tax ID: ESY5024453W. Email: alina@alinatoma.com.
Browsing the website
You can use the website without creating an account. The site is hosted by Cloudflare, which processes essential technical data such as IP address, browser information, requested pages and security events to deliver and protect the site.
Audience measurement
We measure visits ourselves, without Google Analytics, advertising or tracking by third parties. Two first-party cookies hold random identifiers: sp_v (anonymous visitor, 13 months, never renewed) and sp_s (visit session, 30 minutes). With them we record the page viewed, the referring site, your approximate country and city as estimated by Cloudflare, and your browser language. We do not store your IP address, and the data is never combined with other data or shared. It is stored in Cloudflare Workers Analytics Engine. You can opt out of audience measurement at any time; this sets a cookie sp_optout that stops it.
Buying a product
Payments are handled by Stripe, which collects your name, email, card and billing details to process the payment, prevent fraud and send your receipt. SOFTSPOKEN receives your name, email, the product bought and, for the Personal Edition, the name and intention you enter at checkout. SOFTSPOKEN never receives or stores your full card details. See Stripe’s privacy policy.
We use this information to perform your purchase contract (delivering your materials and support) and to meet legal obligations such as tax and accounting records, which are kept for the periods required by Spanish law (generally up to 6 years). We do not sell your data or use it for marketing without your consent.
Emails to us
If you email us, we use your message only to reply and help you. Please do not send medical records, diagnoses or other sensitive health information.
International transfers
Stripe and Cloudflare may process data outside the European Economic Area. They rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.
Your rights
You can ask to access, correct, delete, restrict or object to the processing of your personal data, or to receive a copy of it, by emailing alina@alinatoma.com. You can also complain to the Spanish Data Protection Agency (aepd.es).