Privacy notice

The short version

• There are no accounts, so there is no account data to lose.
• Nothing you type into a calculator leaves your browser. Balances, limits, salaries, debts and rates are never transmitted to us or anyone else.
• No analytics load unless you accept them. Declining means the script is never requested.
• We do not sell personal data. We have none to sell.

Who is responsible

The controller for the processing described here is David Flores Román, a sole trader trading as YourFinanceCoach, of Calle Viena, 3, 11130 Chiclana de la Frontera, Cádiz, Spain, tax identifier 49787794Q. Established in Spain, so the GDPR applies alongside the Spanish LOPDGDD, and the Agencia Española de Protección de Datos is the lead supervisory authority.

Data protection contact: davidflores.profesional@gmail.com. No Data Protection Officer has been appointed, as the processing carried out does not require one.

See our legal notice for full identification details.

What we collect, why, and on what basis

This table is generated from the same list of technologies the site actually uses, so it cannot describe something we do not do or omit something we do. The cookie policy covers the storage side in more detail.

• Consent preference
  What: Your choice per category, and the date you made it.
  Why: Remembers whether you accepted or declined each category, so you are not asked on every page.
  Legal basis: Strictly necessary: storing a consent decision is exempt from the consent requirement under Art. 5(3) of the ePrivacy Directive, because it exists to give effect to your choice.
  Kept for: 6 months, after which you are asked again. Clearable at any time from the site.
• Server access logs
  What: IP address, user agent, requested URL, timestamp.
  Why: Serving pages, security, and diagnosing faults.
  Legal basis: Legitimate interest (GDPR Art. 6(1)(f)): operating and securing the service. No consent is required, and none is sought.
  Kept for: We can view access logs in the hosting control panel over a window of up to 7 days. That is what the panel shows us, not a retention commitment by the host: Hostinger may keep the underlying logs, backups and security records for longer. Its own privacy policy governs that, and we link to it rather than restate it.
• Google Analytics 4
  What: Pages viewed, referring site, approximate location at country level, device and browser type, and events such as which calculator was used or which outbound link was followed. IP anonymisation is enabled.
  Why: Understanding which pages and calculators people find useful, so we know what to improve.
  Legal basis: Consent (GDPR Art. 6(1)(a)), and consent for the storage of information on your device under Art. 5(3) ePrivacy / the Spanish cookie rules and UK PECR.
  Kept for: Event-level data is deleted after 2 months. User-level data is deleted after 14 months. These are the retention settings configured in our Google Analytics property. Aggregated reports — such as how many people viewed a page on a given day — are not governed by those settings and are retained by Google indefinitely; they contain no data about you individually.
• Newsletter sign-up (not currently in use)
  What: The email address you type, and which market page you submitted from.
  Why: Sending the email updates you asked for.
  Legal basis: Consent (GDPR Art. 6(1)(a)), given by submitting the form.
  Kept for: Until you unsubscribe.
• Affiliate tracking (not currently in use)
  What: Nothing is collected by us. Following the link tells the destination site where you came from, in the same way any link does. Some networks set their own cookie once you arrive on their site.
  Why: Letting a bank or lender know that a visit came from this site, so any commission is attributed.
  Legal basis: Not applicable to us: we set no affiliate cookie and run no affiliate script. The destination site is the controller for anything it sets.
  Kept for: Set by the destination site.

What we deliberately do not collect

• Names, addresses, phone numbers or dates of birth.
• Any figure you enter into a calculator — balances, limits, income, debts. These stay in the page’s memory while it is open and are discarded when you close the tab.
• Financial account numbers, card numbers or credentials. We never ask for them.
• Special category data, as defined by data protection law.
• Data about children. This site is not directed at anyone under 18.

Who receives your data

• Our hosting provider, which necessarily processes the IP address of every request in order to serve the page.
• Google, but only if you accept analytics. If you decline, Google receives nothing from this site.
• Your chosen email provider, only if you submit the newsletter form. The form posts directly to them; the address does not pass through our infrastructure.

We do not sell, rent or trade personal data, and we do not share it with advertisers or data brokers.

International transfers

Hosting: no transfer outside the EEA. The site is served from a datacentre in the Netherlands (European Economic Area). Because that is within the European Economic Area, serving this site to you involves no transfer of your data to a third country. Our hosting provider’s own handling is governed by Hostinger’s privacy policy.

If you accept analytics, Google may process the resulting data on infrastructure located outside your country, including in the United States. Google states that it relies on appropriate safeguards for such transfers — for EEA and UK data, the European Commission adequacy decision for the EU–US Data Privacy Framework and/or Standard Contractual Clauses. You can read Google’s position in its privacy policy.

If you decline analytics, no transfer takes place, because nothing is sent. Declining is therefore a complete answer if international transfer is a concern for you.

How long we keep things

• Your consent decision: six months, then you are asked again. Held only in your own browser.
• Server access logs: visible to us in the hosting control panel for up to 7 days. How long our host keeps the underlying logs is set by its own policy, not by us — see Hostinger’s privacy policy.
• Analytics data: event-level data for 2 months, user-level data for 14 months. Aggregated reports containing no individual data are kept by Google indefinitely.
• Newsletter address: until you unsubscribe.
• Emails you send us: for as long as needed to deal with the matter, and then for a reasonable period as a record of the correspondence.

Your rights

Depending on where you live you may have rights of access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To withdraw consent for analytics right now: Cookie preferences. That is the whole process — no email, no form, no delay.

For anything else, write to davidflores.profesional@gmail.com. Because we operate no accounts and collect no identifying information, in most cases we hold nothing that would let us identify you, and we will tell you so rather than ask you to prove an identity we never recorded.

Complaints

If you are not satisfied with how we have handled your data, you can complain to a supervisory authority.

• Agencia Española de Protección de Datos (AEPD) (Spain / EU) — Visitors in Spain, and the lead authority if the operator is established in Spain.
• Your national data protection authority (European Economic Area) — Visitors elsewhere in the EEA. The EDPB lists every national authority.
• Information Commissioner's Office (ICO) (United Kingdom) — Visitors in the United Kingdom, under the UK GDPR and PECR.
• Office of the Australian Information Commissioner (OAIC) (Australia) — Visitors in Australia, under the Privacy Act 1988.

We would rather hear from you first, but you are not required to contact us before complaining.

Automated decision-making

We carry out no automated decision-making or profiling that produces legal or similarly significant effects. Calculators perform arithmetic on figures you type; they do not assess you, score you, or reach a decision about you, and their output is not recorded.

Security

The site is served over HTTPS as static files, with no database, no user accounts and no server-side application to compromise. This is a deliberate design choice: the most reliable way to protect personal data is not to collect it.

Changes

The date at the top of this page shows when it last changed. Where a change is material — for example introducing a new technology that requires consent — consent is sought again rather than assumed.