Legal
Privacy Policy
This page explains what information this website collects, why, and how it is handled. Last updated: August 2026.
This is a plain-language summary provided in good faith and is not a substitute for legal advice. If you have specific legal concerns about data protection compliance, please consult a qualified professional.
1. Who is responsible
This website (thechestnuttree.org) is run by The Chestnut Tree — El Castanyer, Can Ramonet, Sant Joan de Sanata, Llinars del Vallès, Barcelona, Spain. For any question about this policy or your data, contact us at info@thechestnuttree.org.
2. What data we collect
We only collect data that you actively choose to give us:
- Contact and visit-request forms — name, email address, phone number (if provided), your message, and, for visit requests, your child's age and preferred dates. This is used solely to respond to your enquiry, arrange a visit, or process an admissions or job/volunteering request.
- Standard technical logs — like virtually all websites, our hosting provider automatically records basic technical information (such as IP address, browser type, and pages visited) for security and reliability purposes. We do not access this for marketing purposes.
We do not use advertising cookies, and we do not sell or share your data with third parties for marketing purposes.
3. Third-party services this site uses
To keep this website simple and reliable, we rely on a small number of external services, each of which may process limited technical data (such as your IP address) under their own privacy policies:
- GitHub Pages (GitHub, Inc.) — hosts and serves this website.
- Formspree — processes submissions from our Contact and Book a Visit forms and forwards them to our email inbox.
- YouTube (Google) — used in privacy-enhanced mode to embed testimonial videos on our Testimonials page. Google may set cookies once you press play.
- Google Fonts — loads the typefaces used across this site.
We do not run our own analytics or advertising tracking on this site.
4. Legal basis & retention
We process the data you submit based on your consent (submitting a form) and our legitimate interest in responding to enquiries and running the school. We keep enquiry data only as long as needed to handle your request, and admissions-related data for as long as reasonably necessary for that process, after which it is deleted.
5. Children's data
This website is intended for parents, guardians, and educators, not for direct use by children. Where a form asks for a child's age, this is provided by the parent or guardian for admissions or visit-planning purposes only.
6. Your rights
Under EU/Spanish data protection law (GDPR), you have the right to access, correct, delete, or restrict the data we hold about you, and to object to its processing or request its portability. To exercise any of these rights, email info@thechestnuttree.org. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
7. Changes to this policy
We may update this page from time to time as the website or the services it uses change. The "last updated" date above reflects the most recent revision.