Privacy Policy
Last updated: 09/09/2026
1. Who we are
This website (thewildflow.com) is operated by Lisa Geybels, trading as The Wild Flow, a sole trader (autónomo/a) registered in Barcelona, Spain, with NIF Y9188178B and registered address at 08037, Barcelona.
For any questions about this policy or how your data is handled, contact us at lisa@listacoaching.com.
We are the data controller for the personal data described in this policy.
2. What data we collect
We collect personal data when you interact with this website, including:
Contact and application forms. When you apply for a trail running camp or contact us, we collect your name, email address, phone number, and any information you provide about your running experience, dietary requirements, or camp preferences.
Newsletter and marketing sign-up. If you subscribe to our mailing list, we collect your name and email address.
Payment information. If you book and pay for a camp, payment is processed by our third-party payment provider Stripe. We do not store your full card details on our servers.
Website usage data. Like most websites, we automatically collect some technical data through cookies and analytics tools, including your IP address, browser type, device information, and pages visited.
Communications. If you message us via email, WhatsApp, or Instagram direct message, we keep a record of that conversation to respond to you and manage our relationship with you.
3. Why we use your data
We use your personal data to:
respond to enquiries and process camp applications and bookings; deliver the trail running camps and related services you’ve booked; send you information about your booking (logistics, itinerary, updates); send marketing emails about camps, coaching, and related offers, where you’ve opted in; improve this website and understand how visitors use it; and comply with our legal and tax obligations as a business registered in Spain.
4. Legal basis for processing
We process your data on the following legal bases under the EU General Data Protection Regulation (GDPR):
Contract: to process your camp booking and deliver the service you’ve paid for.
Consent: for marketing emails and non-essential cookies, which you can withdraw at any time.
Legitimate interest: to respond to enquiries, improve our website, and run our business responsibly.
Legal obligation: to keep invoicing and accounting records as required by Spanish law.
5. Who we share your data with
We don’t sell your data. We share it with a limited number of service providers who help us run the business:
GoHighLevel — our CRM and email marketing platform, used to manage bookings, communications, and newsletters.
Stripe — to process camp payments securely.
Google Analytics — to understand website traffic (you can opt out via cookie settings).
Hosting provider — WordPress, which stores this website’s data.
Camp collaborators — where relevant, we may share your name and dietary/medical information with local guides, accommodation providers, or partner organisations (such as Sport Getaway for the Valencia camp) strictly to organise and run the camp you’ve booked.
Some of these providers are based outside the European Economic Area (EEA), primarily in the United States. Where this happens, we rely on Standard Contractual Clauses or an equivalent safeguard approved under GDPR to protect your data.
6. How long we keep your data
We keep enquiry and application data for as long as needed to respond to you, plus a reasonable period afterwards in case you get in touch again. Booking and invoicing data is kept for the period required by Spanish tax law (generally 5 years). Newsletter data is kept until you unsubscribe. You can ask us to delete your data sooner, subject to our legal obligations.
7. Your rights
Under GDPR, you have the right to:
access the personal data we hold about you; correct inaccurate data; ask us to delete your data (“right to be forgotten”); restrict or object to how we process your data; receive your data in a portable format; and withdraw consent at any time, without affecting processing carried out before you withdrew it.
To exercise any of these rights, email lisa@listacoaching.com. We’ll respond within one month.
If you’re not satisfied with how we’ve handled your data, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es.
8. Cookies
This website uses cookies to make it function properly and to understand how visitors use it. Essential cookies are always active. Analytics and marketing cookies are only set with your consent, which you can manage or withdraw at any time via the cookie banner on this site.
9. Children
Our camps and services are intended for adults. We don’t knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we’ll delete it.
10. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The “last updated” date at the top of this page shows when it was last revised. We encourage you to review it periodically.
11. Contact
If you have any questions about this Privacy Policy or how we handle your data, contact us at:
lisa@listacoaching.com. The Wild Flow, Barcelona, Spain
