Privacy Policy
This policy explains how Maria Ollero collects and uses your personal data when you visit www.mariaollero.com, book a call, subscribe to content or work with her. It follows the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, the PDPL) and Federal Decree-Law No. 14 of 2023 on Trading by Modern Technological Means. If you live in the European Union, for example when joining a retreat in Spain, you also have the rights given by the EU General Data Protection Regulation (GDPR).
1. Who is responsible for your data
- Data controller: Maria Ollero Sunyer (trading as Collective Coaching & Marketing)
- Trade licence: SC251032201, issued by Sharjah Research Technology and Innovation Park FZA
- Business address: 144 Block C Vl13
- Email: hello@mariaollero.com
2. What data is collected
- When you contact Maria by email, WhatsApp or a form: your name, contact details and your message.
- When you book a discovery call through Cal.com: your name, email, phone number and any answers you give in the booking form.
- When you request the free practice or subscribe to the newsletter: your email address and, if you give it, your first name.
- When you become a client: contact and billing details, notes and written summaries from your sessions, and the goals you share.
- Optional wellbeing questionnaire (DASS-21): if you choose to complete it before and after a programme, your answers are sensitive personal data (health data) under the PDPL. They are only collected with your explicit written consent and used only to show your progress.
- When you browse the website: technical data such as your IP address, browser and pages visited, through cookies. See the Cookie Policy.
3. Why the data is used, and on what legal basis
|
Purpose |
Legal basis |
How long it is kept |
|
Answering your enquiries |
Your request and legitimate interest |
Until the enquiry is resolved, then up to 12 months |
|
Managing discovery calls and bookings |
Steps taken at your request before a contract |
Up to 12 months if you don’t become a client |
|
Delivering coaching, training and retreats |
Performance of the contract |
For the duration of the service, then up to [5] years for legal claims |
|
Session notes, summaries and the optional DASS-21 |
Contract, and your explicit consent for health data |
Until the programme ends, then up to [2] years, or until you withdraw consent |
|
Sending the free practice and the newsletter |
Your consent |
Until you unsubscribe |
|
Invoicing and accounting |
Legal obligation |
As long as tax law requires (in the UAE, generally 5 to 7 years) |
|
Website analytics and functionality |
Your consent (cookies) |
See the Cookie Policy |
You can unsubscribe from emails at any time using the link at the bottom of each email.
4. Who your data is shared with
Your data is never sold. It is shared only with service providers who help run the business, under contracts that protect your data:
- Hostinger: website hosting
- Cal.com: booking of calls and sessions
- Zoho or Mailchimp (Zoho Campaigns): email newsletter and the free practice
- WhatsApp (Meta): if you choose to contact Maria by WhatsApp
- Stripe or bank transfer: payments
- Accountant: invoicing and tax obligations
Data may also be shared with public authorities when the law requires it.
5. International transfers
Maria is based in the UAE, and some providers store data outside the UAE, including in the European Union and the United States. As the PDPL requires, data is only transferred to countries with an adequate level of data protection, or with appropriate safeguards such as contractual commitments, or with your consent.
6. Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, or to receive it in a portable format. Where processing is based on consent, you can withdraw it at any time, without affecting earlier processing.
To exercise your rights, email hello@mariaollero.com. You will receive a reply within one month.
If you are not satisfied with the reply, you can complain to the UAE Data Office. If you live in the European Union, you can also complain to the data protection authority in your country.
7. Security
Appropriate technical and organisational measures are used to protect your data against loss, misuse and unauthorised access. Session notes and questionnaire results are stored securely and only Maria can access them.
8. Minors
The services and this website are intended for adults aged 18 and over. Personal data from minors is not knowingly collected.
9. Changes to this policy
This policy may be updated to reflect changes in the law or in the services. If a change affects how your data is used, you will be told by email or on this website before it takes effect. The latest version will always be on this page.
Last updated: 08 November 2026