Privacy Policy

Last updated: 30 March 2026

1. Who we are

Loro Flow is operated by Heather Melton. For any questions about this policy or your personal data, you can contact us at:

Email: heather@loroflow.com

2. What data we collect

This website is designed to collect as little personal data as possible. The data we may process includes:

  • Email correspondence: If you contact us via email, we process your email address and the content of your message in order to respond to your enquiry.
  • Booking data: If you book a call through our scheduling link (Cal.com), Cal.com processes your name and email on our behalf. Their privacy policy applies to that service.
  • Analytics data: We use Google Analytics (GA4) to understand how visitors use the site. This collects anonymised usage data such as pages visited, time on site, and general location (country/city level). Google may process your IP address. See Google's privacy policy.
  • Cookie consent preference: We store your accept/decline choice in your browser's local storage. This is not personal data and is not transmitted to any server.

3. Legal basis for processing

Under the General Data Protection Regulation (GDPR), we process personal data on the following legal bases:

  • Legitimate interest (Article 6(1)(f)): Responding to enquiries you send us by email.
  • Consent (Article 6(1)(a)): When you voluntarily book a call or reach out to us.

4. How we use your data

We use the data we collect solely to:

  • Respond to your enquiries
  • Provide the services you request
  • Schedule and conduct calls

We do not sell, share, or transfer your personal data to third parties for marketing purposes.

5. Third-party services

This website uses the following third-party services:

We self-host all fonts and do not load resources from third-party advertising services.

6. Data retention

We retain email correspondence for as long as necessary to fulfil the purpose for which it was collected, or as required by law. You can request deletion at any time.

7. Your rights under GDPR

If you are in the European Economic Area (EEA), you have the following rights regarding your personal data:

  • Right of access: Request a copy of the data we hold about you.
  • Right to rectification: Request correction of inaccurate data.
  • Right to erasure: Request deletion of your data.
  • Right to restrict processing: Request that we limit how we use your data.
  • Right to data portability: Request your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interest.
  • Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email us at heather@loroflow.com. We will respond within 30 days.

8. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Authority:

Agencia Espanola de Proteccion de Datos (AEPD)
Website: www.aepd.es

9. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated revision date.

10. Cookies

For information about how this site uses cookies, see our Cookie Policy.