Privacy Policy

Who we are

This website (https://www.montessorianlab.com) is operated by Montessorian Lab, the controller responsible for the personal data described in this policy.

For any question about your data or to exercise your rights, contact us at: hello@montessorianlab.com

What data we collect, and why

Purchases. When you buy a digital product, we collect the information you provide at checkout — your name, email address and billing details — along with your order and download history. We use this to process your order, deliver the product, give you support, and meet our invoicing and tax obligations.
Legal basis: performance of the contract; and legal obligation for invoicing and accounting.

Payments. Card payments are handled directly by Stripe. We never receive or store your full card details — Stripe processes them under its own privacy terms (https://stripe.com/privacy).

Account. If you create an account, we store the profile information you provide so you can access your downloads and order history. You can view and edit this information at any time (your username cannot be changed).

Newsletter and marketing emails. If you subscribe, we use your email address to send you updates and offers through our email provider, Hostinger Reach. We only do this with your consent, and you can unsubscribe at any time via the link in every email.
Legal basis: consent.

Analytics. We use Google Analytics to understand how visitors use the site so we can improve it. This relies on cookies and collects usage data such as pages visited, approximate location and device/browser type. Analytics only runs if you accept it in our cookie banner.
Legal basis: consent.

Security and spam prevention. Our server automatically logs technical data such as your IP address and browser user-agent string to keep the site secure and prevent abuse.
Legal basis: legitimate interest.

Cookies

If you visit our login page, we set a temporary cookie to check whether your browser accepts cookies. It contains no personal data and is discarded when you close your browser.

When you log in, we set cookies to remember your login and display preferences. Login cookies last two days; display cookies last a year. If you choose "Remember me", your login persists for two weeks. Logging out removes the login cookies.

We also use analytics cookies (Google Analytics) as described above. These are only placed if you accept them through our cookie consent banner, and you can change your choice at any time.

Embedded content from other websites

Articles on this site may include embedded content (videos, images, etc.). Embedded content from other websites behaves exactly as if you had visited the other site, and those sites may collect data about you, set their own cookies, and monitor your interaction with that content.

Who we share your data with

We do not sell your personal data. We share it only with the providers that make the service work:

• Stripe — payment processing

• Hostinger (Reach) — website hosting and email delivery

• Google (Analytics) — website analytics

Each provider processes your data under its own privacy terms and only for the purposes described here.

International data transfers

Some of these providers (in particular Stripe and Google) process data outside the European Economic Area, mainly in the United States. When that happens, the transfer is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses and/or the EU–US Data Privacy Framework.

How long we keep your data

• Order and invoice data: kept for as long as tax and accounting law requires (generally up to 6 years).

• Account data: kept until you delete your account or ask us to remove it.

• Newsletter data: kept until you unsubscribe or withdraw your consent.

• Security/server logs: kept for a limited period and then deleted.

Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time (without affecting processing already carried out). To exercise any of these rights, email us at hello@montessorianlab.com

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD — www.aepd.es) if you believe we have handled your data improperly.