Privacy Policy
Last updated:
We collect only what we need to sell you the book, deliver it, answer you and improve the site. We never sell your data.
1. Who is responsible for your data
The data controller is Innova Ingeniería Integral S.A.S. (NIT 901.094.407-5), Calle 37 No. 13-30, Oficina 301, Ibagué, Tolima, Colombia, operating the Spanish with Sofís brand created by Sofía Gil. Contact for any privacy matter: sofia@spanishwithsofis.com · +57 302 461 4515.
For eBook purchases, Lemon Squeezy acts as merchant of record: it processes your payment and billing details as an independent controller under its own privacy policy. We never see or store your card details.
2. What we collect and why
| When | Data | Purpose |
|---|---|---|
| You buy the eBook | Name, email, order number, country, amount paid, and the campaign that brought you (UTM tags), if any | Deliver the book and your personal card, stamp your email on your copy, give support, process refunds, keep accounting records, and measure which campaigns sell |
| You join the waitlist | Name, email, source campaign, and the date and text of your consent | Send you one email when the Academy or the Insider membership opens |
| You write to us (email or WhatsApp) | Name, email or phone number, the content of your messages | Answer you, arrange private classes, and keep a record of the conversation in our customer system |
| You book private classes | Name, contact details, schedule, level and goals, payment confirmation | Schedule and deliver the classes on Google Meet and confirm that the class was paid |
| You browse the site, only if you accept | Pages visited, device and browser, approximate location, referring ad, online identifiers (cookies) | Understand how the site is used (Google Analytics 4) and measure our ads (Meta Pixel). See the Cookie Policy |
| Any visit | IP address and technical logs kept by our hosting provider | Security, preventing abuse and keeping the site running |
We do not use your data for automated decisions that have legal or similarly significant effects on you.
3. WhatsApp and the AI assistant
When you message Spanish with Sofís on WhatsApp, an AI assistant answers first on Sofía's behalf. It can answer questions about the book and the classes and pass the conversation to Sofía. You can ask to speak to a person at any time. Your messages are processed by WhatsApp (Meta), by our AI model provider to generate replies, and stored in our customer system. Please don't send sensitive information (health, financial or identity documents) through the chat.
4. Legal bases (EU/UK GDPR)
- Contract: delivering the eBook and the classes you buy, and answering your requests.
- Consent: the waitlist, analytics and marketing cookies. You can withdraw it at any time; this does not affect processing already carried out.
- Legal obligation: accounting and tax records.
- Legitimate interest: security, fraud prevention and protecting the book against unauthorised distribution (the email stamped on your copy).
In Colombia, we process data with your prior, express and informed authorisation, in line with Law 1581 of 2012 and Decree 1377 of 2013. Our full data processing policy, in Spanish, is available here.
5. Who we share it with
We only share data with service providers that help us run the business, under contracts that limit use to our instructions:
- Lemon Squeezy: checkout, payments, taxes and refunds (merchant of record).
- Resend: sending purchase and service emails.
- Our own servers: customer records (CRM), file delivery and scheduling, managed by Innova.
- Web hosting provider: hosting this website.
- Meta Platforms (WhatsApp, and the Meta Pixel only with your consent).
- Google (Google Meet for classes, Gmail, and Google Analytics only with your consent).
- AI model provider: generating replies in WhatsApp conversations.
We may also disclose data when required by law or to protect our rights. We do not sell your personal data.
6. International transfers
We are based in Colombia and our providers operate in several countries, including the United States. When data leaves the European Economic Area, the UK or Colombia, we rely on the safeguards provided by law, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework where the provider is certified.
7. How long we keep it
- Purchase and accounting records: as long as tax and commercial law requires (in Colombia, up to 10 years).
- Waitlist: until the product launches and for up to 24 months, or until you unsubscribe.
- Conversations and class records: while we work with you and up to 24 months after your last contact.
- Analytics data: 14 months in Google Analytics.
- Your cookie choice: 6 months, after which we ask again.
8. Security
We use encrypted connections (HTTPS), access controls, isolated services, signed and expiring download links, and we limit access to the people who need it. No system is perfectly secure; if a breach affects you, we will notify you and the competent authorities as the law requires.
9. Your rights
You can ask us, free of charge, to: access your data; correct it; delete it; restrict or object to its processing; receive it in a portable format; withdraw your consent; and not be subject to decisions based solely on automated processing. Write to sofia@spanishwithsofis.com from the email linked to your data. We answer within one month (GDPR) or within the deadlines of Colombian law (10 business days for queries, 15 for claims).
You can also complain to your data protection authority. In Colombia, that is the Superintendencia de Industria y Comercio; in the EU, the authority in your country; in the UK, the ICO.
To unsubscribe from the waitlist, use the link in our email or write to us.
10. Additional notice for US residents
We collect the categories of data listed in section 2 for the purposes described there. We do not sell personal information. Advertising cookies (Meta Pixel) may count as "sharing" for cross-context behavioural advertising under some state laws: they are off unless you accept them, and we honour the Global Privacy Control signal as an opt-out. You can exercise your rights to know, delete, correct and opt out by writing to us. We will not discriminate against you for exercising them.
11. Children
This site and our products are intended for adults. We do not knowingly collect data from children under 16. Private classes for minors are only arranged with a parent or guardian, who acts on their behalf. If you believe a child has sent us data, write to us and we will delete it.
12. Changes and contact
We will update this policy when our practices change and show the date at the top. Significant changes will be announced on the site or by email. Questions: sofia@spanishwithsofis.com.