Privacy policy
Last updated: June 2026
Your privacy matters. This policy explains how the personal data you provide through this website is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
Controller: Clara Navarro · Tax ID: 03152624Z · Address: calle valencia 37, 2º · Contact email: info@draclaranavarro.com.
2. Data we process and purpose
Contact form: we process the data you provide (name, phone, email, clinic and treatment of interest, and the content of your message) to handle your request for information or an appointment and to get in touch with you.
Online booking: if you book through the website, we process your name, phone and email to manage the appointment and send you confirmations and reminders by email and, where applicable, by SMS or WhatsApp.
Online payment: if you pay the booking deposit online, the payment is processed by the Stripe gateway; we do not store your card details.
Usage analytics: we measure in an aggregated, anonymous way how the website is used (without cookies and without storing your IP address) to improve the service.
We do not use this data to send marketing communications without your consent.
3. Legal basis
The legal basis for processing is your consent, given by ticking the acceptance box and submitting the form, as well as the application of pre-contractual measures at your request.
4. Retention
We will keep your data for as long as necessary to handle your request and, thereafter, for the legally required periods. Once no longer needed, it will be securely deleted.
5. Recipients
Data will not be shared with third parties except where legally required. The technology providers that serve us may access it as data processors, under appropriate contractual safeguards: web hosting (Vercel Inc.) and database (Neon Inc.), email delivery (Resend), payment gateway (Stripe) and SMS/WhatsApp delivery (Twilio).
Some of these providers may process data on servers located outside the European Economic Area (for example, in the United States). In that case, international transfers are carried out with the safeguards provided for in the GDPR (standard contractual clauses and/or adequacy frameworks such as the EU-US Data Privacy Framework).
6. Health data
Please do not include health data in the form. Special-category data (health) is collected and processed solely within the in-person medical consultation, as part of the clinical record and under the corresponding legal basis.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@draclaranavarro.com, stating the right you wish to exercise.
If you believe the processing does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration.
