Privacy Policy

1. Introduction and Data Controller

Hocico Coach ("we", "our", or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you use our dog training platform.

The data controller responsible for your personal data is:

Legal name: Semidán Robaina Estévez (sole trader)
Tax ID (NIF): 54053400L
Address: C/ Judoca Francisco Fariña 4, 209, 38508 Santa Cruz de Tenerife, Spain
Email: info@hocicocoach.com

2. Information We Collect

2.1 Information You Provide

Account Information: Email address and password
Dog Profile: Your dog's name, age, approximate weight, breed, and behavioral information you share through the onboarding quiz
Training Preferences: Goals, time budget, household details, and session feedback
Communications: Messages and interactions with our support team
Reviews: If you voluntarily leave a review of the service, the star rating, the optional comment, and the optional display name you provide

2.2 Payment and Billing Information

Payments are processed by Stripe. Your card details are provided directly to Stripe and never reach our servers. We receive and store your billing address, purchase and subscription status, and transaction references needed to operate your account and comply with tax law.

2.3 Automatically Collected Information

Device Information: IP address, browser type, operating system
Usage Data: Pages visited, session completion rates, and interaction patterns
Session Data: Authentication tokens and session identifiers managed by our authentication provider
Analytics and Advertising Data: Only if you consent through the cookie banner, data collected by Google Analytics and the Meta Pixel (see Section 9)

3. How We Use Your Information and Legal Bases

Under the GDPR, each use of your data relies on one of the following legal bases:

3.1 Performance of a Contract (Art. 6(1)(b) GDPR)

Create and manage your account
Generate and deliver your personalized 12-week training plan
Track your training progress and session history
Process payments and manage your subscription
Send transactional emails (account confirmation, plan updates, password resets)
Provide customer support

3.2 Legitimate Interest (Art. 6(1)(f) GDPR)

Ensure platform security and prevent unauthorized access and abuse
Analyze aggregated usage patterns to improve our platform and content
Develop new training sessions and features
Store the reviews you voluntarily submit to understand how the service is working and improve it

3.3 Consent (Art. 6(1)(a) GDPR)

Analytics cookies (Google Analytics) and advertising cookies (Meta Pixel), used only after you accept them in the cookie banner
Publication of your review (rating, comment, and display name, if provided) on the Hocico Coach website, only if you tick the optional publication checkbox when submitting it. Published reviews are always checked manually first
You can withdraw consent at any time: cookie consent from the cookie settings link in the footer, and review publication consent by emailing info@hocicocoach.com, after which the review will be removed from the website

3.4 Legal Obligation (Art. 6(1)(c) GDPR)

Retain billing and tax records as required by law
Respond to valid requests from public authorities

4. Information Sharing

4.1 Service Providers (Processors)

We share data with the following providers, only to the extent needed to run the service:

Supabase: Authentication and database hosting
Netlify: Web hosting and content delivery
Stripe: Payment processing
Resend: Delivery of transactional emails
Google (Google Analytics) and Meta Platforms (Meta Pixel): Analytics and advertising measurement, only with your cookie consent

We do not sell your personal data to third parties.

4.2 Legal Requirements

We may disclose information when required by applicable law, court order, or to protect our rights, safety, or the safety of others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of the transaction. We will notify you of any such change.

5. Data Retention

Active Accounts: Data is retained for as long as your account is active
Inactive Accounts: Accounts inactive for more than 24 months may be deleted following prior notice
Deleted Accounts: Certain data may be retained to comply with legal obligations (for example, billing records required by tax law)
Training Data: Session history and progress data are deleted along with your account upon request
Reviews: Kept while your account exists and deleted along with it, or earlier if you ask us to remove your review

6. Your Rights and Choices

6.1 Access and Control

Access: View and update your account information at any time
Data Portability: Request a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Request deletion of your account and personal data, subject to legal retention requirements

6.2 GDPR Rights (EU Users)

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time

6.3 How to Exercise Your Rights

To exercise any of these rights, contact us at info@hocicocoach.com. We will respond within one month.

6.4 How to Delete Your Account

To permanently delete your account and associated personal data, send an email to info@hocicocoach.com from the email address registered to your account, with the subject "Account deletion". We will delete your account, dog profile, quiz responses, training progress, and any other personal data within 30 days of your request, except for information we are legally required to retain (for example, billing records required by tax law). Cancelling your subscription is a separate action and can be done at any time from the Settings page in your account.

7. Data Security

7.1 Security Measures

Data encryption in transit (TLS) and at rest
Secure authentication managed by our infrastructure partners
Role-based access controls and Row Level Security (RLS) policies
Regular security reviews and updates

7.2 Data Breaches

In the event of a data breach affecting your personal information, we will notify you and the relevant supervisory authority within the timeframes required by applicable law.

8. Children's Privacy

Our service is not intended for children under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it promptly.

9. Cookies and Local Storage

We use the following categories of cookies and browser storage:

Necessary: Authentication cookies (session management), your cookie consent choices, and local storage that saves your quiz progress on your device. These are required for the service to function and cannot be disabled.
Analytics: Google Analytics cookies that help us understand how the site is used. Set only if you accept them.
Marketing: The Meta Pixel, used to measure the effectiveness of our advertising. Set only if you accept it.

When you first visit, a banner lets you accept or reject the analytics and marketing categories; nothing optional is set before you choose. You can change your choices at any time via the "Cookie settings" link in the footer.

10. International Data Transfers

Your information may be processed in countries other than your country of residence. Where this involves transfers outside the EU/EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date. For significant changes, we will provide additional notice by email or a prominent notice on our platform.

12. Contact Information

12.1 Privacy Questions

For questions about this Privacy Policy or your personal data:

Email: info@hocicocoach.com

12.2 Supervisory Authority

EU residents have the right to lodge a complaint with their local data protection supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (www.aepd.es).

Last updated: July 19, 2026