Privacy Policy
Last updated: 7 October 2026
Diana Ohayon (“I”, “me”, “my”), based in Marbella, Spain, is responsible for the processing of personal data collected through dianaohayon.com and in connection with the online naturopathy, nutrition, life coaching and NLP consultation services offered through this website.
1. Information I Collect
Depending on how you interact with my website and services, I may collect the following personal information.
Contact information
When you contact me through the contact form, email or another communication channel, I may collect:
Your name
Email address
Phone number, where provided
Subject and content of your message
Any other information you voluntarily provide
The general contact form is intended for enquiries and communication. Please avoid including sensitive health information in the general contact form.
Booking and consultation information
When you book an online consultation, I may collect:
Your name and contact details
Appointment details
Information provided through the initial consultation/intake form
Information provided through follow-up forms
Information about your health concerns, symptoms, lifestyle, habits, nutrition and relevant health history that you voluntarily provide for the purpose of preparing for and providing your consultation
Health-related information is considered special-category personal data under the General Data Protection Regulation (GDPR) and is handled with additional safeguards.
Payment information
Payments for consultations may be made through Stripe or PayPal.
Payment information is processed by the relevant payment provider. I do not store your full credit or debit card details on my website.
Stripe and PayPal may process your personal information in accordance with their own privacy policies and applicable data-protection requirements.
Website and technical information
My website is hosted by Squarespace. Squarespace may automatically process certain technical information when you visit the website, such as:
IP address
Browser and device information
General location information
Pages visited
Technical and website usage information
This information may be used to maintain the security, functionality and performance of the website.
WhatsApp Business
If you choose to contact me through WhatsApp Business, your phone number, name and the content of our communications may be processed through WhatsApp/Meta.
Please avoid sending sensitive health information through WhatsApp unless it is specifically requested or necessary for our communication.
2. How I Use Your Information
I may use your personal information to:
Respond to enquiries and messages
Schedule and manage consultations
Prepare for consultations
Provide and follow up on my services
Communicate with you about your consultation
Process payments
Maintain appropriate client and business records
Meet legal, tax and accounting obligations
Maintain the security and functionality of my website and services
Handle requests concerning your personal-data rights
I do not sell, rent or trade your personal information.
I do not use information about your health for marketing purposes.
3. Legal Bases for Processing
I process personal data only where there is an appropriate lawful basis under applicable data-protection law.
Depending on the circumstances, the legal basis may include:
Performance of a contract
Processing may be necessary to take steps at your request before entering into a service agreement or to provide the consultation you have booked.
Consent
I may rely on your consent where consent is required by applicable law, including where appropriate for the processing of health-related information.
Where consent is used as the legal basis, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Legal obligations
Certain personal information may need to be processed to comply with applicable legal, tax, accounting or other legal obligations.
Legitimate interests
Where permitted by applicable law, I may process information where necessary for legitimate interests such as maintaining the security of my website, preventing misuse and managing my business, provided that these interests do not override your rights and freedoms.
4. Health Information
Information relating to your physical or mental health is considered special-category personal data under Article 9 of the GDPR.
When you voluntarily provide health-related information through my consultation or intake forms, I process that information only for purposes connected with preparing for and providing your consultation and managing your client relationship.
Where consent is the legal basis relied upon for processing health information, I will request explicit consent through the relevant consultation/intake process.
You are not required to provide health information through the general contact form.
5. Third-Party Service Providers
I use third-party service providers to operate my website, schedule consultations, communicate with clients and process payments.
These may include:
Squarespace
Squarespace provides website hosting and related website services.
Acuity Scheduling
Acuity Scheduling, a Squarespace service, is used for appointment scheduling and consultation intake and follow-up forms.
Information submitted through Acuity may include personal information and health-related information that you voluntarily provide.
Stripe
Stripe is used to process consultation payments.
Stripe may process personal data in different capacities depending on the specific processing activity. Its own privacy documentation and applicable data-protection terms apply to processing carried out by Stripe.
PayPal
PayPal may be used as an alternative payment method. Payment and related personal information may be processed by PayPal in accordance with its own privacy policy and applicable data-protection requirements.
WhatsApp Business
WhatsApp Business may be used for communication with clients who choose to contact me through WhatsApp.
These providers may process personal data outside the European Economic Area. Where required by applicable data-protection law, appropriate safeguards are used for international data transfers.
6. Data Sharing
I do not sell your personal information.
I may share or allow access to personal information with third-party service providers where necessary to:
Operate my website
Schedule and manage consultations
Process payments
Communicate with you
Maintain business records
Comply with legal obligations
Protect my rights, safety or property
I only use such providers where appropriate safeguards and contractual arrangements are required by applicable law.
7. How Long I Keep Your Information
I retain personal information only for as long as reasonably necessary for the purposes for which it was collected.
This may include the period necessary to:
Provide and follow up on consultations
Maintain appropriate client records
Process payments and accounting records
Comply with legal and tax obligations
Resolve disputes
Establish, exercise or defend legal claims
Different categories of information may therefore be retained for different periods.
When information is no longer required, I will take reasonable steps to securely delete or anonymise it, unless I am legally required or otherwise permitted to retain it.
8. Data Security
I take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Access to client information is limited to what is reasonably necessary for the operation of my services.
However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.
9. Your Data Protection Rights
Under the GDPR and applicable Spanish data-protection law, you may have the right to:
Access the personal data I hold about you
Request correction of inaccurate or incomplete personal data
Request deletion of your personal data, where applicable
Request restriction of processing in certain circumstances
Object to certain processing
Request portability of your personal data, where applicable
Withdraw consent where processing is based on consent
Lodge a complaint with a competent data-protection authority
To exercise your rights, please contact:
You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) if you believe your data-protection rights have not been respected.
10. Cookies
This website may use cookies and similar technologies provided by Squarespace and, where applicable, by third-party services integrated with the website.
Some cookies may be necessary for the website to function properly, maintain security or remember certain preferences.
Where consent is required for non-essential cookies, they will only be used in accordance with your choices.
For more information about the cookies used on this website and how to manage your preferences, please see the Cookie Policy.
11. Communications and Marketing
I may communicate with you regarding your enquiries, bookings, consultations, payments and other matters directly related to services you have requested.
I do not use your health information for marketing purposes.
If I introduce newsletters or other marketing communications in the future, I will provide an appropriate mechanism to manage your preferences and, where required, obtain your consent.
12. Children's Data
My services are intended for adults unless explicitly agreed otherwise.
I do not knowingly collect personal information from children through the general website contact form.
If a consultation involves a minor, information will be collected and processed with the involvement and appropriate authorisation of the parent or legal guardian, where required by applicable law.
13. Changes to This Privacy Policy
I may update this Privacy Policy from time to time to reflect changes in my services, technology, legal requirements or the way personal data is processed.
The latest version will always be published on this page together with the date of the most recent update.
14. Contact
Diana Ohayon
Marbella, Spain
Email: diana@dianaohayon.com
Website: dianaohayon.com