Privacy notice
Last updated:
Who's responsible for your details
This site belongs to Daniela Camargo Kinsella, author and speaker. If you book a block of sessions for your school, invite her to speak or buy one of her e-books, she decides how your details are used. In data protection law, she's the controller.
Camay, the studio that built and runs the site, keeps the details on its server for her. Camay works under a written agreement with Daniela and can only use them to run this site for her.
To ask about your details, or to use any of the rights below, email Daniela at .
What we collect
If you book a block of sessions for your school:
- your school, picked from the list
- the weekday, the five dates, the number of children and the February option you chose
- your name and your role in the school
- your email address, and a phone number if you give one
If you invite Daniela to speak:
- the date, the kind of event, the theme, the language, the format and roughly how many people are coming
- the name of the group or organisation hosting it, and the town
- your name, your email address, and a phone number if you give one
- anything you write in the notes box
Please don't put pupils' names, or anyone's health details, in either form. We don't need them.
When anyone visits the site, the server sees their IP address. It's used to keep the site running and to stop abuse, like one address sending hundreds of forms.
There are no cookies, analytics or advertising trackers on the public pages. The only cookie on this site is the one that keeps Daniela, or Camay when she asks it to help, logged in to her panel.
Why we use your details, and on what legal basis
| What for | Legal basis under the GDPR |
|---|---|
| Arranging, confirming and running your school's sessions, and contacting you about them | Legitimate interests, Article 6(1)(f). You're writing on your school's behalf, and Daniela needs someone to arrange the sessions with. |
| Replying to your invitation and planning the talk | Steps you've asked for before an agreement, Article 6(1)(b). If you're writing for a group, legitimate interests, Article 6(1)(f). |
| Details in an invitation that may show your religious beliefs, such as the name of a church | Your explicit consent, Article 9(2)(a), given with the tick box on the form. |
| Keeping the site safe (IP addresses) | Legitimate interests, Article 6(1)(f). |
You don't have to give us any of this. Without a name and an email address, though, Daniela can't reply to you or confirm a booking.
We won't use your details for marketing, and we won't add you to a mailing list.
Who sees your details
Daniela sees what you send. Camay can see it when Daniela asks it to help, or when the site needs fixing. OVHcloud, the company that provides the server, stores it but doesn't use it. When Daniela replies to you by email, the reply goes through her own email provider. If you buy an e-book, Stripe and Resend also get what they need for that: see "If you buy an e-book" below. Nobody else gets your details, and they're never sold.
The public calendar only shows if a date is free or taken. It never shows who booked it.
Links to Amazon take you to Amazon's own site, where Amazon's privacy notice applies.
Where your details are kept
On a server in London, in the United Kingdom. The European Commission has decided that the UK protects personal data to the standard the EU requires. That decision was renewed in December 2025 and runs until 27 December 2031, so your details can be kept there without extra safeguards. If that changes, we'll move the data or put other safeguards in place, and update this notice. If you buy an e-book, some details also go to the United States: see "If you buy an e-book" below.
How long we keep them
Daniela decides how long she keeps the contact details from bookings and invitations. When she no longer needs them, she has them deleted. You can ask her to delete yours at any time: see "Your rights" below.
When contact details are deleted, your name, role, email address, phone number and notes are wiped. The school or group, the town and the dates stay, so Daniela's diary still makes sense.
| Details | Kept until |
|---|---|
| IP addresses | about an hour in memory; up to five weeks in the server's logs |
Backup copies
We don't keep separate backup copies of your details. The hosting company keeps one copy of the whole server, replaced every day, so the site can be put back if the server breaks. Anything we wipe or delete can stay in that copy for up to two days, and then it's gone.
If you buy an e-book
What we keep
- which e-book you bought, the price, and whether you bought from the English or the Portuguese page
- when you ordered and paid, and whether the order was paid, expired or refunded
- that you ticked the box about the 14-day right to cancel, when, and which wording you saw
- your email address, which you type on Stripe's page. The site only keeps it once your payment is confirmed.
- Stripe's reference numbers for the payment
- whether the email with your e-book went out, and how many times you downloaded it from the page you land on after paying
Your card details go straight to Stripe. This site never sees them. Stripe's page may also ask for your name and country. Stripe keeps those, and this site doesn't.
While you're buying, your browser keeps a code for your order in that tab, so the page you land on after paying can find it. It goes when you close the tab. It isn't a cookie and isn't used for anything else.
Why, and on what legal basis
| What for | Legal basis under the GDPR |
|---|---|
| Taking your payment, sending you the e-book, letting you download it, and replying to you about your order | Carrying out the sale you asked for, Article 6(1)(b). |
| Sending you the confirmation of your order that consumer law requires, and keeping the records of her sales that tax law requires | A legal obligation, Article 6(1)(c). |
| Keeping proof of what you agreed to and paid, in case there's a question about the order, a refund or a disputed payment | Legitimate interests, Article 6(1)(f). Daniela needs to be able to show what happened. |
The tick box about the 14-day right to cancel is a step consumer law asks for. It isn't consent to use your details.
You need to give an email address to buy, because that's how the e-book reaches you. Daniela won't use it for marketing or add it to a mailing list.
Who sees them
Daniela sees your order in her panel, with your email address. Camay can see it when Daniela asks it to help, or when the site needs fixing.
Stripe takes the payment for Daniela. She sees the payment in her Stripe account, without your full card number. Stripe also uses payment details for its own purposes, like spotting fraud and meeting its own legal duties. For that, Stripe decides how they're used, and Stripe's privacy notice applies. If you pay with another payment service offered on Stripe's page, such as a wallet or a pay-later service, that service's own privacy notice applies too.
Resend sends the email with your e-book for Daniela, from her own email address. It gets your email address and the email, with the e-book attached.
Where they go
Your order is kept on the server in London described above. Resend is in the United States and keeps the email there. Stripe may also send payment details to the United States. Both companies take part in the EU-U.S. Data Privacy Framework, which the European Commission has decided protects personal data to the standard the EU requires. Resend also has the EU's standard contractual clauses in place. If that changes, we'll update this notice.
How long we keep them
Daniela decides how long she keeps your email address. When she no longer needs it, she has it deleted, and you can ask her to delete it at any time. If a refund or a disputed payment for your order is still open, she may keep it until that's settled.
When your email address is deleted, the rest of the order stays, without it, as the record of her sale. That's part of her business records, which Irish tax law requires her to keep for at least six years. She decides when it's deleted after that.
Resend keeps the email for 30 days, and its backups for up to a week after that. Stripe keeps its own record of the payment for as long as the law requires it to. The backup copies described above apply to orders too.
Your rights, in the next section, cover your orders too.
Your rights
You can ask Daniela to:
- give you a copy of your details
- correct anything that's wrong
- delete your details
- limit how they're used while a question is sorted out
- give you your details in a format you can reuse, where we rely on your consent or on a request you made
You can object at any time to us using your details on the basis of legitimate interests. If you gave consent, you can withdraw it at any time. That doesn't affect what was done before.
Email . Daniela will reply within one month.
You can also complain to the Data Protection Commission, Ireland's data protection authority, at www.dataprotection.ie.
Decisions made by computer
The booking form checks which dates are free and blocks the ones already taken. That's all it does on its own. Every booking and every invitation is accepted or declined by Daniela, or by Camay when she asks it to. When you buy an e-book, Stripe's own systems may turn down a payment that looks like fraud. That's Stripe's decision, under its privacy notice.
Changes to this notice
If we change it, we'll change the date at the top.