Last Updated: 3 August 2026
This Privacy Policy explains how Larissa Roberts (“I”, “me”, “my”) collects, uses, shares, and protects your personal data when you visit the Recuerdos website http://www.recuerdos.bio, sign up for a free article, subscribe to the magazine, or otherwise interact with me. I am the data controller for the personal data processed under this policy.
I am committed to protecting your privacy and processing your data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.
1. Who I am and how to contact me
Data Controller: Larissa Roberts (a sole trader trading under my own name).
Email: admin@larissaroberts.com
Postal address: 6 Hoopers Walk, Bristol BS30 9DZ
ICO registration number: ZC005565
If you have any questions about this policy or wish to exercise your data subject rights, please contact me using the details above.
2. What personal data I collect
I may collect, store, and use the following categories of personal data:
· Identity & contact data: your name, email address, and any other information you voluntarily provide (for example, when you create an account or contact me).
· Subscription & account data: your chosen subscription plan, account preferences, username (if applicable), and communication preferences.
· Transaction data: details about payments you make. I do not collect or store your full payment card details. All payment card information is handled securely by my third-party payment processors Stripe. I may receive a token or a reference to identify your transaction.
· Technical data: your internet protocol (IP) address, browser type and version, time zone setting, operating system, device information, and information about how you use the website (pages visited, links clicked, time spent).
· Usage data: which articles you read, how you interact with our emails (e.g., open and click-through rates), and other engagement metrics.
· Communication data: records of correspondence when you contact me for support or with inquiries.
· Marketing and consent data: your preferences for receiving marketing communications from me and your consent records.
3. How I collect your personal data
I collect data in the following ways:
· Directly from you: when you sign up for a free article, create an account, subscribe, update your preferences, fill in a form, or contact me.
· Automated technologies: when you browse the website, I automatically collect technical and usage data via cookies, server logs, and similar technologies (see Section 7).
· From third parties: payment processors provide me with confirmation of your transactions and limited billing details. I may also receive analytics information from providers such as Google Analytics.
4. How I use your personal data and the legal bases
Delivering the free article you requested
· Type of data: Identity, contact, technical
· Lawful basis: Consent (you actively provide your details to receive the article)
Creating and managing your subscription account, providing the twice‑monthly magazine content, and processing payments
· Type of data: Identity, contact, subscription, transaction
· Lawful basis: Performance of a contract (our Terms and Conditions)
Sending you service‑related communications (e.g., account updates, payment confirmations, changes to terms)
· Type of data: Identity, contact
· Lawful basis: Performance of a contract and, where required, Legitimate interest (keeping you informed about your account)
Sending you marketing emails about Recuerdos, special offers, or related content (where you have not purchased a subscription)
· Type of data: Identity, contact, marketing consent
· Lawful basis: Consent (you opt in via a tick box when signing up for a free article or via a separate sign‑up form)
Sending you marketing emails about similar products and services to those you already have from me (existing subscribers)
· Type of data: Identity, contact, usage
· Lawful basis: Legitimate interest (the “soft opt‑in” rule under the Privacy and Electronic Communications Regulations – you will always have the opportunity to opt out at the point of data collection and in every subsequent communication)
Improving the website, content, and user experience
· Type of data: Technical, usage
· Lawful basis: Legitimate interest (understanding how the website is used to enhance my service)
Complying with legal obligations (e.g., tax, accounting, responding to lawful requests)
· Type of data: All relevant data
· Lawful basis: Legal obligation
Establishing, exercising, or defending legal claims
· Type of data: All relevant data
· Lawful basis: Legitimate interest (protecting my business interests)
Consent withdrawal: Where I rely on consent, you have the right to withdraw it at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal. You can unsubscribe from marketing emails by clicking the “unsubscribe” link in any email, updating your preferences, or contacting me directly.
5. Marketing communications
You will only receive promotional emails from me if:
· You have explicitly opted in (e.g., by checking a box on the free article sign-up form); or
· You are an existing subscriber and I rely on the “soft opt-in” to send you information about similar Recuerdos products. I will have given you a simple way to opt out when you first provided your data, and you will find an unsubscribe option in every marketing email.
I will never sell your data to third parties for their own marketing.
6. Cookies and similar technologies
What are cookies?
Cookies are small text files that are placed on your device (computer, smartphone, tablet) when you visit a website. They are widely used to make websites work efficiently, to provide information to the site owners, and to enhance the user experience. Similar technologies, such as pixels or local storage, can serve the same purpose. In this section, “cookies” refers to all such technologies.
How Recuerdos uses cookies
I use cookies and similar technologies to:
· Keep the website secure and functioning properly;
· Remember your preferences and login details;
· Understand how you interact with the magazine so I can improve it;
· Deliver relevant content (and, where you’ve consented, marketing messages).
Some cookies are set by the Recuerdos website (first‑party cookies), and others are set by trusted third parties whose services I use (third‑party cookies).
Types of cookies I use
Strictly necessary (essential) cookies
These cookies are essential for the website to work. They enable core functionality such as security, network management, and accessibility. The website cannot function properly without them.
· Examples: session cookies that keep you logged in while you move between pages; cookies that remember your cookie consent preferences.
· Lawful basis: these are set on the basis of my legitimate interest in providing a secure and functional website. Consent is not required.
Analytics and performance cookies
These cookies help me understand how visitors use Recuerdos, which pages are most popular, and whether any errors occur. The information collected is aggregated and anonymised where possible.
· Example: Google Analytics cookies that track page views, time on site, and visitor flow.
· Lawful basis: I only set these cookies with your explicit consent, given via the cookie banner.
Functionality cookies
These allow the website to remember choices you make (such as your username or language preference) to provide a more personalised experience.
· Example: a cookie that remembers that you’ve already dismissed a welcome message.
· Lawful basis: consent, where these cookies are not strictly necessary.
Marketing and targeting cookies
These cookies may be set by me or by third‑party advertising partners to build a profile of your interests and show you relevant promotions on other sites. I do not currently display third‑party advertising on Recuerdos; however, I may use a small number of marketing cookies for my own communications (e.g., tracking if you’ve been referred from a promotional email).
· Lawful basis: consent. These cookies are only placed if you choose “Accept all” or toggle “Marketing cookies” on in the preference panel.
Third‑party cookies
Some services I use may place their own cookies. These include:
· Payment processors (e.g., Stripe or PayPal): strictly necessary cookies to detect fraud and process payments securely.
· Analytics providers (e.g., Google Analytics): analytics cookies placed only with your consent.
· Email service providers (e.g., Mailchimp): small tracking pixels in marketing emails may tell me if an email was opened or a link was clicked. These are only active if you have consented to marketing cookies.
I do not control these third‑party cookies, and they are governed by the relevant provider’s own privacy and cookie policies.
Consent and control
When you first visit the Recuerdos website, you will see a cookie consent banner that invites you to:
· Accept all cookies (essential, analytics, and marketing);
· Reject all non‑essential cookies (only essential cookies will be set);
· Manage settings to choose which categories of non‑essential cookies you allow.
The banner records your choices. You can change your preferences at any time by clicking the “Cookie Settings” link in the footer of every page, or by clearing your browser cookies and revisiting the site, which will cause the banner to reappear.
You can also block or delete cookies through your browser settings. The “Help” function in your browser will show you how. Please note that disabling essential cookies may affect the functionality of the website and prevent you from accessing your subscription.
More detail
For a complete, up‑to‑date list of the specific cookies used on the site—including their names, providers, purposes, and durations—please open the “Manage settings” panel in the cookie banner. That panel provides a granular view of all active cookies and allows you to adjust your preferences at any time.
7. How I share your personal data
I do not sell, trade, or rent your personal data to others. I may share your data with trusted third parties only to the extent necessary to run my business and fulfil my contract with you. These third parties act as data processors and are bound by contracts to keep your data secure and to process it only on my instructions.
Categories of recipients:
· Payment processors (e.g., Stripe, PayPal, GoCardless) – to manage subscription payments. Your card details are collected directly by them; I do not see or store full card numbers.
· Email service providers (e.g., Mailchimp, ConvertKit) – to send service and marketing emails and manage mailing lists.
· Website hosting and cloud storage providers – to host the website and store data securely.
· Analytics providers (e.g., Google Analytics) – to understand website usage.
· Professional advisers (e.g., accountants, lawyers) – as required for legal compliance or business needs.
· Authorities – if required by law, to respond to a valid legal request, or to protect my rights.
8. International transfers of data
Many of my service providers are based outside the UK. When I transfer your personal data outside the UK, I ensure a similar degree of protection is afforded by implementing appropriate safeguards. This may include:
· Transferring to countries that have been deemed to provide an adequate level of protection by the UK government; or
· Using specific contracts (such as the UK International Data Transfer Agreement or standard contractual clauses) approved for use in the UK.
Please contact me if you would like further information on the specific mechanism used when your data is transferred.
9. Data security
I have implemented appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. These include using encryption (e.g., SSL/TLS on the website), access controls, and secure hosting environments.
However, the transmission of information via the internet is not completely secure. I will do my best to protect your personal data, but I cannot guarantee the security of data transmitted to the website; any transmission is at your own risk.
10. Data retention
I will only keep your personal data for as long as necessary to fulfil the purposes for which I collected it, including to satisfy any legal, accounting, or reporting requirements.
· Free article sign-ups: If you do not proceed to a paid subscription, I will keep your contact details for up to 12 months after your free access expires, unless you ask me to delete them earlier or you choose to receive ongoing marketing (in which case I keep them until you withdraw consent).
· Active subscribers: Account information is retained while your subscription is active and for a period of 6 years after termination (for tax and legal purposes). Transaction records are kept in line with UK tax law (normally 6 years).
· Marketing consent: I will retain your consent record for as long as I send you marketing communications, and for a limited period after you withdraw consent to demonstrate compliance.
· Usage and technical data: Typically anonymised or aggregated after 26 months]and retained in non-identifiable form.
After these periods, your data will be securely deleted or anonymised.
11. Your rights under UK GDPR
You have the following rights in relation to your personal data:
· Right of access: Request a copy of the personal data I hold about you.
· Right to rectification: Ask me to correct inaccurate or incomplete data.
· Right to erasure (“right to be forgotten”): Request that I delete your personal data in certain circumstances (e.g., where the data is no longer necessary, or you withdraw consent and there is no other legal ground for processing).
· Right to restrict processing: Request that I limit the way I use your data while a concern is resolved.
· Right to data portability: Receive your data in a structured, commonly used, machine-readable format and have it transferred directly to another controller, where processing is based on consent or a contract and is carried out by automated means.
· Right to object: Object to processing based on legitimate interests (including profiling). I must stop unless I demonstrate compelling legitimate grounds or the processing is for legal claims. You have an absolute right to object to direct marketing at any time.
· Rights related to automated decision-making and profiling: I do not carry out solely automated decision-making that has a legal or similarly significant effect on you. If that changes, I will inform you.
To exercise any of these rights, please email me at admin@larissaroberts.com. I will respond within one month of receiving your request (subject to any extension permitted by law). I may need to verify your identity before processing your request.
12. Complaints
If you have any concerns about how I handle your personal data, please contact me first so I can try to resolve the matter. You also have the right to lodge a complaint with the UK’s Information Commissioner’s Office (ICO) at any time. You can visit the ICO’s website at www.ico.org.uk for more information.
13. Changes to this Privacy Policy
I may update this policy from time to time. When I make changes, I will post the updated version on this page and update the “Last Updated” date. If the changes are significant, I will also notify you by email or via a prominent notice on the website. I recommend reviewing this policy occasionally to stay informed about how I protect your data.
—
By signing up for a free article, creating an account, or subscribing to Recuerdos, you acknowledge that you have read and understood this Privacy Policy.