Last updated: 12 October 2026
This policy explains what personal information SHAPEFIXER collects, why, who we share it with, and the rights you have over it. We have written it to be read, not just to be legally correct, so please get in touch if anything is unclear.
Who we are
SHAPEFIXER is run by Abigail Tunstall, self-employed (autónomo), NIE Y5117666L, Calle Aliatar 3, 18300 Loja (Granada), Spain. We are the “data controller” for the personal information described here, which means we decide how it is used and are responsible for protecting it.
You can contact us about anything in this policy at andrew@shapefixer.com.
What information we collect
- Contact details — your name, email address and, if you give it, your phone number, when you sign up for a guide or email series, book a consultation, buy a programme or contact us.
- Health information you choose to share — for example the health topic you select when you sign up (such as hip arthritis or blood pressure), and anything you tell us about your health in a booking form, a consultation, an email or a message.
- Purchase details — what you bought, when, and how much you paid. Card payments are handled by Stripe; we never see or store your full card number.
- Course activity — your login, which lessons you have accessed and your progress, if you join one of our courses.
- Messages — emails, form messages and chat messages you send us, and our replies.
- Technical information — such as your IP address, browser and device type, and how you use our website and emails (for example whether an email was opened). Some of this is collected with cookies; see “Cookies” below.
Health information
Information about your health is a special category of personal data under data protection law, so we only collect and use it with your explicit consent, which you give when you choose a health topic or share health details with us. We use it only to send you information relevant to your situation and, if you book a consultation or programme, to prepare for and deliver it.
You can withdraw this consent at any time by emailing us or using the unsubscribe link in any email. We will then stop using your health information and delete it, unless we have to keep a record of a purchase for tax reasons.
Our content and consultations are educational and are not a substitute for medical advice. Please consult your doctor before changing any treatment.
How we use your information, and our legal basis
- To deliver what you have bought (course access, consultations, programmes) and send related emails such as receipts and booking confirmations — because it is necessary to perform our contract with you.
- To send you our email series, guides and occasional offers — based on your consent, which you can withdraw at any time. Where you have bought from us before, we may email you about similar products, and you can opt out at any time.
- To use the health topic and details you share — based on your explicit consent (see above).
- To answer your questions and messages — based on our legitimate interest in responding to people who contact us.
- To keep accounting and tax records — because the law requires it.
- To understand how our website and emails are used and improve them — based on your consent where cookies are involved, and otherwise on our legitimate interest in running and improving our business.
We do not sell your personal information, and we do not use it for automated decisions that have legal or similarly significant effects on you.
Who we share it with
We use a small number of service providers who process personal information on our behalf and under our instructions:
- HighLevel (LeadConnector) — our customer management system, which also runs our email, sign-up forms, booking calendar, course platform, checkout and website hosting.
- Stripe — card payment processing.
- Our accountants and professional advisers, where needed to run the business and meet our legal obligations.
We may also disclose information where the law requires it, for example to tax authorities.
Embedded YouTube videos. Some pages show videos from our YouTube channel. We do not send Google your name, email or any other details you give us. But when a page with a video loads, or when you play it, your browser connects to YouTube, so Google receives your IP address and may set cookies, under Google’s own privacy policy.
International transfers
Some of these providers, including HighLevel, Stripe and Google, are based in or store data in the United States. Where your information is transferred outside the European Economic Area, we rely on the safeguards recognised by the European Commission: the EU–US Data Privacy Framework where the provider is certified under it, or the European Commission’s Standard Contractual Clauses.
How long we keep it
- Email list and health topic — until you unsubscribe or ask us to delete it.
- Customer and purchase records — for six years after the purchase, as required for accounting and tax purposes.
- Course accounts — for as long as you have access to the course, and then deleted on request.
- Messages — for as long as needed to deal with your enquiry, and then for up to 2 years.
Your rights
You have the right to:
- access the personal information we hold about you
- have it corrected if it is wrong
- have it deleted
- object to or restrict how we use it
- receive a copy of it in a portable format
- withdraw your consent at any time (this does not affect anything we did before you withdrew it)
To use any of these rights, email us at andrew@shapefixer.com. We will reply within one month. There is no charge.
If you are not happy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es), or to the authority in the country where you live.
Unsubscribing from emails
Every marketing email we send includes an unsubscribe link. You can also email us and we will remove you.
Cookies
Our website uses cookies that are needed for it to work, and, only with your permission, cookies that help us understand how it is used. See our Cookie Policy for details and to change your choices at any time.
Children
Our website, courses and services are intended for adults. We do not knowingly collect personal information from anyone under 18.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. If we make significant changes, we will let customers know by email.