THE IBIZA METHOD™ / PRIVACY
Privacy Policy
How TRUEART AGENCY SL processes personal data used by THE IBIZA METHOD™.
1. Controller
TRUEART AGENCY SL, NIF B75323741, Calle Monsenyor Palmer, 1N, 07014 Palma de Mallorca, Illes Balears, Spain. Contact: hello@theibizamethod.com.
2. Data we may process
Depending on the service, we may process identification and contact data, professional and project information, information submitted through forms, Discovery and report content, purchase and billing data, communications, consent choices and technical/security data. We do not request special categories of personal data to use ARTIST.
3. Purposes
We process data to manage requests and Discovery sessions, provide purchased services, generate requested reports and analyses, recover access, process payments and billing, answer enquiries, maintain service security, prevent abuse, comply with legal obligations and, where a valid legal basis exists, send marketing communications.
4. Analytics and cookies
Google Analytics 4 is optional and is loaded only after the user expressly accepts analytics. It is used to measure visits, sessions and product events. The website also uses necessary first-party browser storage and cookies for consent, sessions, Discovery recovery and security. See the Cookie Policy for the detailed technology inventory and consent controls.
5. ARTIST and artificial intelligence
When ARTIST is used, information provided by the user may be processed through technological systems and artificial intelligence tools to analyse it and generate the corresponding report. Reports may contain analysis, interpretations and hypotheses and do not guarantee professional or commercial outcomes. We do not ask users to submit special categories of personal data for ARTIST.
6. Public information
Where a service uses publicly available information, it may form part of the analytical basis. The service may combine public sources with information supplied by the user to produce the requested intelligence. Public information is handled in accordance with applicable law and the stated purpose of the service.
7. Legal bases
Depending on the processing, the legal basis may be the performance of a contract or pre-contractual measures requested by the user, compliance with a legal obligation, consent, or legitimate interests where applicable and appropriately assessed. Analytics cookies are activated on the basis of consent where consent is required. Consent may be withdrawn at any time without affecting prior lawful processing.
8. Providers and recipients
We use service providers necessary to operate THE IBIZA METHOD™, including hosting and infrastructure (Vercel), database and application infrastructure (Supabase), analytics (Google Analytics 4), email and marketing communications (MailerLite), artificial intelligence and research technology (OpenAI), and payment services (Revolut). These providers act according to their applicable contractual role and instructions where they are processors or service providers. We do not sell personal data.
9. International transfers
Some providers or their infrastructure may involve processing outside the European Economic Area. Where an international transfer of personal data takes place, we use the transfer mechanism and safeguards required by applicable data-protection law, such as an adequacy decision or appropriate contractual safeguards where applicable.
10. Retention
Discovery, account and service information is retained for as long as necessary to provide the requested service and manage the relationship, and afterwards for the periods required to comply with legal obligations, establish or defend claims and meet accounting or consumer-law requirements. Consent preferences are retained through the consent cookie for up to 24 months. Analytics retention is governed by the retention settings configured in the Google Analytics property. Data no longer needed is deleted or anonymised where appropriate.
11. Your rights
You may request access, rectification, erasure, objection, restriction and portability, and withdraw consent where applicable. Contact hello@theibizamethod.com. You may also complain to the Spanish Data Protection Agency (AEPD).
12. Security
We apply technical and organisational measures appropriate to the risks of processing, including server-side handling of secret credentials, signed and HttpOnly session cookies for Discovery access, HTTPS transport, access controls and security headers. No online service can guarantee absolute security, so we also review and update controls as risks change.
13. Automated processing and reports
THE IBIZA METHOD™ analyses are intelligence and decision-support tools. AI-assisted processing may contribute to research, synthesis and report generation. The reports are not legal, medical, tax or financial advice and do not guarantee results. Users should assess conclusions before making decisions.