Privacy policy

Last updated 1 October 2026. The Spanish version prevails.

Who handles your data

Ana Belén Ruiz Trujillo (Origen Reset), NIF 34757959Z, Urb. Castaño, calle El Cerezo 17, 29532 Mollina (Málaga, Spain). Contact: ana@origenreset.com. There is no data protection officer.

What data, what for and on what legal basis

If you write to me (forms, email or WhatsApp)

Your name, your email and whatever you tell me, plus what you choose on the form (the service you're interested in, your time slot or your country). I use them to reply to you and, if you ask, to organise your classes, the assessment interview or your meditation. Legal basis: your request and pre-contractual steps (Art. 6.1.b GDPR). Giving me your data is voluntary, but without a way to contact you I can't reply.

Health data, only if you decide to tell me

In the studio and Origin Frequency forms you can, if you wish, tell me something about your health (an injury, a pregnancy, how you sleep, tension or mood). I only handle it if you tick the explicit consent box next to the form, and only to adapt the practice to you or prepare the interview (Art. 9.2.a GDPR). You can withdraw that consent at any time by writing to ana@origenreset.com, without affecting what came before. If you don't tick the box, please don't tell me health data: we'll talk about it in person.

If you buy a meditation

Payment is handled by Stripe: I never see or store your card details. From Stripe I receive your email, the amount and what you bought, and with that I create your personal listening link and send it to you. Legal basis: performance of the purchase contract (Art. 6.1.b GDPR) and tax obligations (Art. 6.1.c GDPR).

When you visit the website

To know what is used on the website, I anonymously note which pages are visited, which site visitors come from, which recordings or videos are played and for how long, and whether a purchase or contact button is pressed. I don't store your IP address or use cookies for this: a fingerprint is calculated from the IP that changes every day, which only serves to count distinct people and doesn't allow anyone to know who you are or recognise you the next day. This data is kept on the same server and isn't shared with anyone. Legal basis: legitimate interest in improving the website (art. 6.1.f GDPR).

The server records technical data (IP address, browser, page and time) so the website works and stays secure. On the listening page I also keep, for 30 days, an encrypted fingerprint of the connection (not the IP address) and the browser type of each device, to limit each purchase to your own devices and detect if a link is being shared. Legal basis: legitimate interest in keeping the website secure (Art. 6.1.f GDPR). I don't use it to identify you or to build profiles. There is no analytics, advertising or tracking.

I don't make automated decisions or build profiles, and I don't send advertising.

For how long

• Enquiries: up to 12 months after the last contact if we don't end up working together.
• If you become a student or buy a meditation: for as long as the relationship lasts and, afterwards, for the periods the law requires (4 years for tax purposes, 5 for civil claims). Your listening link stays active for as long as the website does, unless you ask me to delete it.
• Health data: deleted as soon as it's no longer needed to adapt the practice, and at the latest when the relationship ends.
• Server technical logs: the minimum time set by the hosting provider.

Who else handles your data

Processors (they work for me and only follow my instructions):

• Web hosting and email: Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca (Cyprus).
• Payments: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2 (Ireland). Stripe also handles some data as an independent controller, to prevent fraud and meet its legal obligations, under its own privacy policy.

If you write to me on WhatsApp, WhatsApp Ireland Limited handles your data as an independent controller, under its own terms, and may transfer it to the United States. Stripe may transfer data outside the European Economic Area with the safeguards of the EU-US Data Privacy Framework and standard contractual clauses. I don't pass your data on to anyone else unless the law requires it.

Your rights

You can ask for access, rectification, erasure, objection, restriction and portability, and withdraw any consent you have given, by writing to ana@origenreset.com. You can also complain at any time to the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).

Minors

This website, the classes and the shop are aimed at adults. I don't handle data of children under 14; if I find any, I delete it.