PRIVACY POLICY

Last updated: 29 October 2026

Who is responsible?

Rocío Egío Pérez (Rocio Egio), NIF 48685252W, Chemin du Martinet 6B, 1020 Renens, Switzerland. Contact: hola@rocioegio.com.

This policy explains personal data processing connected with www.rocioegio.com and the studio’s professional relationships. Swiss data protection law applies, together with the GDPR where its territorial requirements are met.

What data is processed and why?

Website visits: technical data such as IP address, browser, device, pages viewed and referring website are processed by the website platform to deliver and secure the site. Optional analytics are subject to the cookie choices described in the Cookie Policy.

Enquiries: when you use the contact form or email me, I process the contact details and message you provide to answer your request, discuss a project and maintain the correspondence. Please do not include sensitive personal information that is not needed for your enquiry.

Studio projects: I process client and supplier contact details, project briefs, correspondence, agreements, deliverables and billing records to prepare proposals, fulfil contracts, manage payments and meet accounting or other legal obligations.

Newsletters: marketing emails are sent when you subscribe or another applicable legal permission exists. You can unsubscribe using the link in each email or by contacting me. The Miniletters link takes you to Substack, where subscription and reading are also governed by that platform’s privacy information. Marketing tools may provide delivery, open and click statistics; email privacy features can affect their accuracy.

Social media: if you contact me through Instagram or another platform, I process the information you choose to share to respond. Simply visiting this website does not give permission to access your private social media profile or use your image in advertising.

Closed shop and former school

The shop is closed and current courses, creative mentoring and community activities are presented through Bloomers’ Club. This does not erase records needed to support previous purchases, course access, invoicing or legal claims. Existing records are retained only for the relevant purposes and applicable retention periods. New Bloomers subscriptions are explained in that website’s privacy policy. Moving or renaming an activity does not override your marketing preferences or unsubscribe requests.

Legal grounds

Where the GDPR applies, processing is based on your consent for optional marketing and cookies; steps requested before a contract and performance of a contract for enquiries and projects; legal obligations for required records; and legitimate interests in responding to professional communications, maintaining security and managing or defending claims, subject to your rights. Consent can be withdrawn without affecting processing already carried out lawfully.

Service providers and recipients

The site and its forms are hosted by Squarespace. Squarespace Email Campaigns is used for relevant mailing lists and email delivery. Google Workspace services support professional email and document storage. Miniletters is offered through Substack. Providers process data according to their roles and applicable agreements. Information may also be disclosed to professional accounting or legal advisers, competent authorities, or other recipients when needed for a specific contract or legal duty. Personal data is not sold.

Where earlier shop transactions involved payment or delivery providers, the relevant transaction records may still need to be retained; those historical arrangements do not mean a shop operates here today. Information about the platforms is available at Squarespace Privacy, Google Privacy and Substack Privacy.

International processing

These online providers may process information outside Switzerland, including in the United States and the European Economic Area, and use subprocessors in other locations disclosed in their current documentation. Applicable transfer safeguards depend on the recipient and arrangement, such as an adequacy decision covering the recipient or standard contractual clauses with the necessary Swiss adaptations. The former EU–US Privacy Shield is not relied upon as a valid transfer mechanism. You can request information about recipients, processing countries and the safeguards relevant to your data at the contact address above.

How long is data kept?

Enquiry data is kept for as long as needed to handle the request and necessary follow-up. Project, billing and historical transaction records are kept for the applicable contractual, accounting and legal periods. Newsletter details are kept while you remain subscribed; a limited suppression record may be retained to respect an unsubscribe request. Data is deleted or anonymised when it is no longer needed, subject to legitimate legal retention requirements.

Your choices and rights

Depending on the applicable law, you may request access, correction, deletion, restriction, objection or portability of your data, and withdraw consent. Write to hola@rocioegio.com. Additional identification will be requested only if reasonably necessary to verify the request. You may complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or another competent supervisory authority, including the authority in your EU country where applicable.

Security and updates

Reasonable technical and organisational measures are used to protect personal data. No internet service can guarantee absolute security. This policy will be updated when the website or its processing changes; materially new purposes will be explained before the relevant processing starts.