Privacy Policy

Last updated: March 2026

1. Data Controller

Nora Kadiri ("we", "us", or "our") is the data controller responsible for your personal data collected through this website (norakadiri.com).

Contact: privacy@norakadiri.com

2. Data We Collect

When you use our contact form, we collect:

  • Your name
  • Your email address
  • Your fitness goals (as described by you)

We may also collect technical data such as your IP address and browser type through essential cookies used by our hosting provider (Cloudflare).

3. Purpose and Legal Basis

We process your personal data for the following purposes:

  • To respond to your inquiry — Legal basis: your consent (Art. 6(1)(a) GDPR), given by submitting the contact form and checking the consent box.
  • To provide our services — Legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).
  • Website security and functionality — Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

4. Data Retention

Contact form data is retained for up to 12 months after your last interaction with us, unless a longer retention period is required by law or necessary for ongoing service provision.

5. Third-Party Processors

We use the following third-party services to process your data:

  • Cloudflare — Website hosting and CDN (security and performance)
  • Web3Forms — Contact form submission processing
  • Google Fonts — Font delivery (your IP address may be transmitted to Google servers)

6. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict processing of your data
  • Data portability — receive your data in a structured format
  • Object to processing based on legitimate interests
  • Withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at privacy@norakadiri.com.

7. Right to Complain

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es, or with the supervisory authority of your country of residence.

8. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.