Privacy
Privacy Policy
Last updated: 24 August 2026
This Privacy Policy explains how Backstory Books SL collects, uses, and protects your personal data when you book a class, course, or workshop through The Studio's booking website.
1. Who we are
The data controller responsible for your personal data is:
Backstory Books SL NIF: B44951713 C/Mallorca 330, Local, Barcelona, Spain Email: hello@backstorybookshop.com
We operate The Studio as part of Backstory Bookshop.
2. What data we collect
When you make a booking, we collect only:
- Your name
- Your email address
We do not collect payment card details, phone numbers, addresses, or any other personal data through the booking form.
If your booking requires payment, you'll be redirected to PayComet's secure payment page to complete the transaction. Payment is processed entirely by PayComet, which collects and handles your payment data directly under its own privacy policy. We never see, collect, or store your card details on our site.
Feedback
Any feedback we collect about classes, instructors, or The Studio is strictly anonymous. We do not link feedback to your name, email, or booking record, and we do not treat it as personal data.
3. Why we collect this data
We use your name and email to:
- Confirm and manage your booking
- Communicate with you about the class, course, or workshop you've booked (schedule changes, reminders, cancellations)
- Share your name and email with the instructor teaching that specific class, so they can prepare and run the session
We do not use your data for marketing purposes.
4. Legal basis for processing
We process your name and email under:
- Article 6(1)(b) GDPR — Performance of a contract: processing is necessary to manage your booking and deliver the class you've registered for.
5. Who we share your data with
We share your name and email only with the instructor teaching the specific class you've booked, so they can prepare for the session.
We do not share, sell, or disclose your data to any other third party, except where required by law.
6. How long we keep your data
We retain your name and email for as long as necessary to manage your booking and the class cycle, and for a limited period afterward to handle any follow-up questions, complaints, or legal obligations. We delete this data once it is no longer needed for these purposes.
7. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data (“right to be forgotten”)
- Restrict how we process your data
- Object to processing
- Data portability — receive your data in a structured, commonly used format
- Withdraw consent at any time, where processing is based on consent (this doesn't affect processing carried out before withdrawal)
To exercise any of these rights, contact us at hello@backstorybookshop.com. We will respond within one month, as required by law.
You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es, if you believe your data has been mishandled.
8. Security
We take reasonable technical and organizational measures to protect your name and email from unauthorized access, loss, or misuse.
9. Cookies
We use no tracking, analytics or advertising cookies — nothing to opt out of. The only things stored in your browser are the few strictly necessary items needed to sign you in and remember your settings, listed in full on our cookie notice.
10. Children's data
We do not knowingly collect personal data from children under 16 without parental consent.
11. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Significant changes will be communicated via the booking website.
12. Contact us
If you have any questions about this Privacy Policy or how we handle your data, contact us at:
Backstory Books SL hello@backstorybookshop.com C/Mallorca 330, Local, Barcelona, Spain
Our booking terms live on the terms and conditions page, and the full list of what we store in your browser is on the cookie notice.