Privacy Policy

Last updated: 8 October 2026

This Privacy Policy explains how personal data is collected and used when you visit justineherlin.com, contact me, subscribe to communications or book a call.

Who is responsible for your data?

The data controller is Justine Herlin.

Address: Uri Estarta - 48993 Getxo, Bizkaia

Contact: hello@justineherlin.com

What information may be collected?

Depending on how you use the site, this may include:

  • contact details such as your name, work email, company and message;
  • information you provide when booking a call;
  • newsletter subscription data;
  • technical and usage data such as pages viewed, device/browser information, referrer and interaction data;
  • professional/business contact information used for B2B prospecting or lead enrichment;
  • consent preferences and cookie choices.

The website does not require a user account and does not process payments.

Why this information is used

Personal data may be processed to:

  • respond to enquiries and take steps before entering into a professional engagement;
  • schedule and manage calls;
  • send newsletters or other communications you have requested;
  • understand how the website is discovered and used;
  • improve content, user experience and marketing performance;
  • manage and qualify B2B leads and professional relationships;
  • protect the site against abuse or spam;
  • comply with legal obligations.

Depending on the purpose, the legal basis may be your consent, steps taken at your request before entering into a contract, performance of a contract, compliance with a legal obligation, or legitimate interests such as operating and improving the business and managing relevant B2B relationships.

Non-essential analytics, advertising or behavioural-tracking technologies only load after the required consent has been obtained. CookieYes is used to manage cookie consent.

You can change or withdraw your cookie choices at any time through the consent interface.

Service providers and tools

The site and related business processes use the following providers:

o2switch

Hosting provider for justineherlin.com and its static website files.

Cal.com

Used to schedule calls. When you book, Cal.com may process information such as your name, email, company, responses to booking questions, chosen meeting time and related technical data.

Brevo

Used for newsletter and email-list management. Subscription data may include your email address, consent status and engagement with emails.

Google Analytics 4

Used to measure website usage and performance. Analytics remain disabled until consent is obtained.

Microsoft Clarity

Used to understand how visitors interact with the website, including aggregated behavioural analytics and, where enabled, session-replay or heatmap functionality. Clarity only loads after consent has been obtained.

Factors AI

Used for website and B2B marketing analytics. It only loads after consent has been obtained.

LinkedIn Insight Tag

Used for campaign measurement, website audience analysis and LinkedIn advertising-related measurement. It only loads after consent has been obtained.

Apollo

Used for B2B prospecting, professional-contact enrichment and lead research. Apollo may process business contact information such as name, role, company and professional contact details. It is not used to collect payment information or create consumer profiles through this website.

Google Search Console

Used to monitor how justineherlin.com appears in Google Search, including search queries, impressions, clicks, indexing and technical search-performance data. Google Search Console itself is a webmaster/search-performance tool and does not add a separate visitor-tracking script or cookie to the site.

reCAPTCHA

Used on forms to reduce spam and automated abuse. Google's Privacy Policy and Terms of Service apply.

The site may link to third-party websites. Their privacy practices are governed by their own policies.

International transfers

Some service providers may process data outside the European Economic Area. Where required, appropriate safeguards such as adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms should be used by the relevant provider.

How long data is kept

Personal data is kept only as long as reasonably necessary for the purpose for which it was collected, including legitimate business, contractual, accounting, legal and security needs. Newsletter subscribers remain on the list until they unsubscribe or the data is otherwise removed. Lead and client records may be retained for a reasonable business and legal period after the relationship ends.

Your rights

Under the GDPR, you have the right to:

  • access your personal data;
  • correct inaccurate data;
  • request deletion;
  • restrict processing;
  • object to certain processing, including direct marketing;
  • receive portable data where applicable;
  • withdraw consent at any time where processing relies on consent;
  • lodge a complaint with a data-protection authority, such as the Spanish Data Protection Agency (AEPD).

To exercise these rights, contact hello@justineherlin.com.

Marketing communications

You can unsubscribe from marketing emails at any time using the unsubscribe link in the message or by contacting me.

Security

Reasonable technical and organisational measures are used to protect personal data. No internet-based system can be guaranteed completely secure.

Changes to this policy

This policy may be updated when the website, tools or legal requirements change. The latest version will be published on this page with an updated date.

Contact

For privacy questions or data-rights requests: hello@justineherlin.com