Privacy Policy

This policy explains how Maria Ollero collects and uses your personal data when you visit www.mariaollero.com, book a call, subscribe to content or work with her. It follows the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, the PDPL) and Federal Decree-Law No. 14 of 2023 on Trading by Modern Technological Means. If you live in the European Union, for example when joining a retreat in Spain, you also have the rights given by the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

  • Data controller: Maria Ollero Sunyer (trading as Collective Coaching & Marketing)
  • Trade licence: SC251032201, issued by Sharjah Research Technology and Innovation Park FZA
  • Business address: 144 Block C Vl13
  • Email: hello@mariaollero.com

2. What data is collected

  • When you contact Maria by email, WhatsApp or a form: your name, contact details and your message.
  • When you book a discovery call through Cal.com: your name, email, phone number and any answers you give in the booking form.
  • When you request the free practice or subscribe to the newsletter: your email address and, if you give it, your first name.
  • When you become a client: contact and billing details, notes and written summaries from your sessions, and the goals you share.
  • Optional wellbeing questionnaire (DASS-21): if you choose to complete it before and after a programme, your answers are sensitive personal data (health data) under the PDPL. They are only collected with your explicit written consent and used only to show your progress.
  • When you browse the website: technical data such as your IP address, browser and pages visited, through cookies. See the Cookie Policy.

3. Why the data is used, and on what legal basis

Purpose

Legal basis

How long it is kept

Answering your enquiries

Your request and legitimate interest

Until the enquiry is resolved, then up to 12 months

Managing discovery calls and bookings

Steps taken at your request before a contract

Up to 12 months if you don’t become a client

Delivering coaching, training and retreats

Performance of the contract

For the duration of the service, then up to [5] years for legal claims

Session notes, summaries and the optional DASS-21

Contract, and your explicit consent for health data

Until the programme ends, then up to [2] years, or until you withdraw consent

Sending the free practice and the newsletter

Your consent

Until you unsubscribe

Invoicing and accounting

Legal obligation

As long as tax law requires (in the UAE, generally 5 to 7 years)

Website analytics and functionality

Your consent (cookies)

See the Cookie Policy

You can unsubscribe from emails at any time using the link at the bottom of each email.

4. Who your data is shared with

Your data is never sold. It is shared only with service providers who help run the business, under contracts that protect your data:

  • Hostinger: website hosting
  • Cal.com: booking of calls and sessions
  • Zoho or Mailchimp (Zoho Campaigns): email newsletter and the free practice
  • WhatsApp (Meta): if you choose to contact Maria by WhatsApp
  • Stripe or bank transfer: payments
  • Accountant: invoicing and tax obligations

Data may also be shared with public authorities when the law requires it.

5. International transfers

Maria is based in the UAE, and some providers store data outside the UAE, including in the European Union and the United States. As the PDPL requires, data is only transferred to countries with an adequate level of data protection, or with appropriate safeguards such as contractual commitments, or with your consent.

6. Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, or to receive it in a portable format. Where processing is based on consent, you can withdraw it at any time, without affecting earlier processing.

To exercise your rights, email hello@mariaollero.com. You will receive a reply within one month.

If you are not satisfied with the reply, you can complain to the UAE Data Office. If you live in the European Union, you can also complain to the data protection authority in your country.

7. Security

Appropriate technical and organisational measures are used to protect your data against loss, misuse and unauthorised access. Session notes and questionnaire results are stored securely and only Maria can access them.

8. Minors

The services and this website are intended for adults aged 18 and over. Personal data from minors is not knowingly collected.

9. Changes to this policy

This policy may be updated to reflect changes in the law or in the services. If a change affects how your data is used, you will be told by email or on this website before it takes effect. The latest version will always be on this page.

Last updated: 08 November 2026