Privacy Policy

Last updated: September 2026

Draft notice: This is a working draft prepared as a starting point and has not been reviewed by a lawyer. Before relying on it for a live, paying business, have it checked by a qualified legal/data-protection professional for your jurisdiction.

1. Who is responsible for your data

Rebeko is operated by Alejo Garrote ("we", "us"), an individual based in Valladolid, España. Tax ID (NIF): [pending — to be added once registered as a self-employed professional/autónomo]. For any question about this policy or your data, contact us at info@rebekoinsights.com.

2. What data we collect

Contact form: when you submit the contact form on this site, we collect your email address and any message you write.
Newsletter subscription: when you subscribe to our reports (free or paid), our newsletter provider (Substack) collects your email address and, for paid plans, payment details processed directly by Stripe — we never see or store your card details ourselves.
Business email: messages sent to our contact email are forwarded to our personal inbox via a third-party forwarding service.

3. Why we process this data

To respond to enquiries submitted through the contact form.
To deliver the newsletter and reports you subscribe to.
To process payment for paid subscriptions.

The legal basis for this processing is your consent (submitting the form or subscribing) and, for paid plans, the performance of the subscription contract.

4. Third-party services we use

We rely on the following third-party services to run this site and deliver our reports. Each processes some personal data on our behalf, under their own privacy policies:

Formspree — processes contact form submissions. Privacy policy
Substack — hosts our newsletter and manages the subscriber list. Privacy policy
Stripe — processes payments for paid subscriptions. Privacy policy
ImprovMX — forwards email sent to our business address. Privacy policy
Netlify — hosts this website. Privacy policy
Google Fonts — loads the fonts used on this site; your browser may contact Google's servers to fetch them. Privacy policy

Some of these providers may process data outside the European Economic Area. Where that happens, they rely on their own safeguards (such as Standard Contractual Clauses) to protect your data.

5. How long we keep your data

Contact form submissions are kept as long as needed to respond to your enquiry. Newsletter subscriber data is kept for as long as you remain subscribed, and is removed when you unsubscribe (subject to what Substack itself retains under its own policy).

6. Your rights

Under GDPR, you have the right to access, correct, delete, restrict, or port your personal data, and to object to its processing. To exercise any of these rights, email us at info@rebekoinsights.com. You can also unsubscribe from the newsletter at any time using the link in any email we send.

7. Cookies

This website itself does not set its own tracking cookies. Third-party services embedded or linked from this site (such as Substack) may set their own cookies when you interact with them — see their respective privacy policies for details.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent revision.

9. Contact

Questions about this policy: info@rebekoinsights.com