Privacy Policy
Last updated: March 2026
hereaware.com · Barcelona, Spain
1. Who We Are
Here Aware is a registered independent mindfulness practice based in Barcelona, Spain, operated by Joyce Octavo as a registered autónoma.
Website: hereaware.com
Contact: hereaware.com/contact
Location: Barcelona, Spain
Here Aware offers nature-based mindfulness experiences including Birdsong Walks, Reiki sessions, Mindfulness Meditation, and the Field Journal — a physical product shipped to customers in Spain, Europe, and internationally.
2. What Data We Collect
We collect only the personal data necessary to provide our services and fulfil orders. This may include:
When you contact us or book a session:
Your name and email address
Any information you share voluntarily in your message (such as your health context for Reiki sessions)
WhatsApp number (if provided for session coordination)
When you purchase the Field Journal:
Your name and shipping address
Email address (for order confirmation and shipping updates)
Payment information — processed securely by Squarespace / Stripe. We do not store your card details.
When you visit our website:
Usage data collected by Squarespace (our website platform), including anonymised analytics such as pages visited and time spent
Cookies — see Section 7 below
When you join our WhatsApp community or Meetup group:
Your name and phone number (WhatsApp) or Meetup profile, governed by those platforms' own privacy policies
3. How We Use Your Data
We use your personal data only for the purposes for which it was collected:
To respond to your enquiries and coordinate sessions
To process and fulfil orders for the Field Journal
To send order confirmations and shipping updates
To send announcements about upcoming walks and events (only if you have opted in or joined our community group)
To improve the website and user experience
We do not use your data for automated decision-making or profiling.
Our lawful basis for processing your data under GDPR is:
Contract performance — to fulfil orders and deliver services
Legitimate interests — to communicate with people who have reached out to us
Consent — for any marketing communications or optional data collection
4. Who We Share Your Data With
We do not sell, rent, or trade your personal data. We share it only with trusted third parties necessary to operate our services:
Squarespace — website hosting, online store, and payments. Privacy policy: squarespace.com/privacy
Stripe — payment processing. Privacy policy: stripe.com/privacy
PackLink — shipping and order fulfilment. Privacy policy: packlink.com/privacy-policy
SumUp — booking and payment processing for Reiki sessions. Privacy policy: sumup.com/privacy
Meetup — event management and community. Privacy policy: meetup.com/privacy
WhatsApp (Meta) — community announcements. Privacy policy: whatsapp.com/legal/privacy-policy
Insight Timer — guided audio content. Privacy policy: insighttimer.com/privacy
All third-party services are selected for their compliance with GDPR and applicable data protection standards.
5. How Long We Keep Your Data
Contact enquiries and session correspondence: up to 2 years after last contact
Order records (Field Journal): up to 7 years, as required by Spanish tax law
Community group membership: until you leave the group or request removal
You may request deletion of your data at any time. See Section 6.
6. Your Rights Under GDPR
As a person in the EU, you have the following rights regarding your personal data:
Right of access — to request a copy of the data we hold about you
Right to rectification — to correct inaccurate or incomplete data
Right to erasure — to request deletion of your data ('right to be forgotten')
Right to restrict processing — to ask us to limit how we use your data
Right to data portability — to receive your data in a portable format
Right to object — to object to our processing of your data
Right to withdraw consent — at any time, where processing is based on consent
To exercise any of these rights, please contact us at hereaware.com/contact. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD): aepd.es
7. Cookies
Our website uses cookies — small files stored on your device — to support site functionality and analytics. These are managed by Squarespace, our website platform.
Types of cookies used:
Essential cookies — required for the site to function correctly
Analytics cookies — anonymised data about how visitors use the site (used to improve our content)
Preference cookies — to remember your cookie choices
You can manage your cookie preferences using the cookie banner displayed on your first visit to hereaware.com. You may also adjust cookie settings in your browser at any time.
8. Data Security
We take reasonable steps to protect your personal data from unauthorised access, loss, or misuse. Our website is hosted on Squarespace, which uses industry-standard security including SSL encryption. Payments are processed by Stripe and SumUp, which are PCI-DSS compliant.
Please note that no method of transmission over the internet is 100% secure. While we do our best to protect your data, we cannot guarantee absolute security.
9. International Transfers
Some of our third-party service providers (such as Squarespace and Stripe) may process data outside the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
10. Children's Privacy
Most Here Aware services are intended for people aged 16 and over. However, children are welcome to attend Social Birdwatching events when accompanied by a parent or legal guardian. In these cases, the accompanying adult is fully responsible for the child throughout the event, including their safety, behaviour, and wellbeing. Here Aware does not assume any supervisory responsibility for children attending events.
We do not knowingly collect personal data from children under 16 independently of their parent or guardian. If a parent or guardian signs up or registers on behalf of a child, that adult's contact details are used for all communication. If you believe a child has independently provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the 'Last updated' date at the top of this page. We encourage you to review this policy periodically.
12. Contact
If you have any questions about this Privacy Policy or how we handle your data, please get in touch:
Here Aware · Barcelona, Spain
It all starts with being here, aware.