Privacy policy

The data controller is ATENCION AL CLIENTE 24 HORAS S.L., with Tax ID B16642795, registered address at Carrer del Fluvià, 1, BAJOS, 07009 Palma, España and contact email support@natalis.io.

• Data you provide: name, email address, birth data (date, time and place) and the answers you give in the questionnaire.
• Usage and device data: IP address, device type and browser, pages visited and transaction identifiers.
• Payment data: managed entirely by our payment provider. We do not store your full card details.

• To provide the Service (calculate your chart and generate your personalised content).
• To manage your account and magic-link access.
• To process payments and prevent fraud.
• To handle your support requests.
• To analyse usage and improve the Service.
• To send you marketing communications only with your consent.
• To comply with our legal obligations.

We process your data on the following GDPR bases:

• Performance of a contract: to provide you with the Service.
• Consent: for marketing and non-essential cookies.
• Legitimate interests: security, fraud prevention and improvement of the Service.
• Legal obligation: tax and accounting obligations.

We do not sell your data. We share it only with service providers who help us operate, acting as data processors: hosting and infrastructure, payment provider, analytics and email-sending tools. Also with authorities when required by law. (Complete here the specific names of your providers: p. ej. Stripe, Supabase, etc.)

• Account data: while the account is active and for a reasonable period after inactivity.
• Billing records: for the period required by tax regulations (generally 6 years).
• Support communications and security logs: for the time necessary for their purposes.

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to us at support@natalis.io. If you believe we have not properly addressed your request, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

We apply reasonable technical and organisational measures (encryption in transit, access controls and monitoring). No system is 100% infallible. In the event of a security breach affecting your data, we will notify you without undue delay and, where applicable, within 72 hours, in accordance with the GDPR.

We use first-party and third-party cookies. Essential cookies enable the site to function; analytics and marketing cookies are only activated with your consent, which you can manage via the cookie banner. (If you publish a separate Cookie Policy, link it here.)

The Service is intended exclusively for persons aged 18 and over. We do not knowingly collect data from minors; if we detect any, we will delete it.

If any of our providers processes data outside the European Economic Area, we require adequate safeguards (such as the European Commission's Standard Contractual Clauses) to protect your information.

We may update this policy. We will publish changes on this page with their date and, if material, we will notify you.

For any questions about privacy, please write to us at support@natalis.io.