Privacy policy

ReConnect Marketplace
PRIVACY POLICY
Last updated: June 2026
Data Controller: ReConnect | Avenida Pintor Fernando Soria 8, 03540 Alicante, Spain
Email: aurelia@onlinevillage.com | Supervisory Authority: AEPD (aepd.es)
This Privacy Policy describes how ReConnect (“ReConnect”, “we”, “us”, “our”) collects, uses, stores, shares, and protects personal information when you use our website, marketplace, community platform, applications, communication tools, events, and related services (collectively, the “Service”).

ReConnect is an online marketplace and community platform designed to help creators, coaches, educators, wellness professionals, entrepreneurs, artisans, and young people connect, collaborate, share services, sell products, and participate in a supportive digital community. 

ReConnect operates two distinct sections: an Adult Marketplace open to users aged 18 and over, and a Young Creators Marketplace for people aged 13 to 18 operating under full parental oversight.

We are committed to protecting your privacy and processing personal information transparently and securely in accordance with the EU General Data Protection Regulation (EU GDPR, Regulation 2016/679) and the Spanish Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD, Ley Orgánica 3/2018).

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller and Contact Information
The data controller responsible for all personal data processed through ReConnect is:

ReConnect
Operated by: Aurelia [SURNAME], Autónoma
NIE: Z3582076S
Address: Avenida Pintor Fernando Soria 8, 03540 Alicante, Spain
Email: aurelia@onlinevillage.com
Supervisory Authority: Agencia Española de Protección de Datos (AEPD) — aepd.es

For any data protection queries, requests, or concerns, please contact us at the email address above. We will respond within 30 days.

2. Interpretation and Definitions
Account — a unique registered profile used to access and use the Service.
Cookies — small files stored on your device to help improve user experience and platform functionality.
EU GDPR — the EU General Data Protection Regulation (2016/679).
LOPDGDD — the Spanish Organic Law on Data Protection and Guarantee of Digital Rights (Ley Orgánica 3/2018).
Marketplace — the ReConnect platform where users may offer or purchase products, services, coaching, educational content, or digital products.
Parent/Guardian — the parent or legal guardian who registers and manages a Young Creator account.
Personal Data — any information relating to an identified or identifiable natural person.
Seller — any user offering goods, services, coaching, workshops, or digital content through the Service.
Service — the ReConnect platform, website, applications, marketplace, and community services in their entirety.
Stripe Connect — the third-party payment processing and financial infrastructure service provided by Stripe, Inc.
Usage Data — information collected automatically from use of the Service (e.g. IP address, browser type, pages visited).
Young Creator — a person aged 13 to 18 using the Young Creators section of ReConnect under parental oversight.

3. Personal Data We Collect
3.1 Data Provided by Adult Users and Sellers
When an adult user or seller registers on or uses ReConnect, we may collect:

Full name and username;
Email address and password;
Profile image and biography;
Business name and business registration details (where applicable);
VAT or tax identification number (where applicable);
Billing address and country of residence;
Community posts, comments, uploaded photos, videos, or files;
Messages and communications sent through the platform;
Transaction history, order records, and payment history;
Support tickets and communications with our support team;
Survey responses and feedback.

Note: Banking details, payout account information, and full financial identity verification (KYC) are collected and held exclusively by Stripe Connect. ReConnect does not store this data.

3.2 Data Provided by Parents/Guardians (Young Creator Accounts)
When a Parent/Guardian registers a Young Creator account, we collect:

Parent/Guardian full legal name and contact email address;
Parent/Guardian billing address and country of residence;
NIE/NIF or equivalent tax identification number (for accountability and tax purposes as set out in the Parental Agreement);
Young Creator’s platform username (which should not be their full real name);
Young Creator’s date of birth (to verify age eligibility — not displayed publicly);
Listing content uploaded by the Parent/Guardian on behalf of the Young Creator (product descriptions, images, pricing, service details);
Coaching session attendance records (attendance only; session content is not recorded without explicit consent).

Note: Banking and payout details for Young Creator accounts are collected and held exclusively by Stripe Connect under the Parent/Guardian’s account. ReConnect does not store these details.

3.3 Data Collected Automatically
When you use the Service, we automatically collect:

IP address and approximate location;
Browser type and version;
Device identifiers and operating system;
Referral URLs and pages visited;
Time spent on pages and interaction patterns;
Crash reports and diagnostics;
Language preferences and time zone settings.

3.4 Cookies and Tracking Technologies
We use cookies and similar technologies for the following purposes:

Essential cookies: required for the platform to function (e.g. session management, login).
Functional cookies: to remember your preferences and improve your experience.
Analytics cookies: to understand how users interact with the platform and improve functionality.
Performance cookies: to monitor platform speed and stability.

We do not use advertising or remarketing cookies for the purpose of serving paid advertisements. You may manage cookie preferences through your browser settings, although disabling essential cookies may affect platform functionality. A cookie consent mechanism is provided on the platform in accordance with EU law.

3.5 Third-Party Login Services
Users may choose to register or log in using third-party services (e.g. Google, Apple, Facebook/Meta). When using these services, we may receive profile information associated with your account, subject to your privacy settings with those providers.

4. How We Use Personal Data
We use personal data for the following legitimate operational and business purposes:

Creating, managing, and maintaining user accounts;
Operating the marketplace and processing transactions;
Processing subscription payments and seller payouts via Stripe Connect;
Facilitating communication between users where necessary;
Verifying seller identities and age eligibility of Young Creators;
Providing and improving customer support;
Administering monthly coaching and community sessions;
Preventing fraud, abuse, and unauthorised activity;
Improving platform functionality and user experience;
Sending service-related notices, invoices, and platform updates;
Managing memberships and subscriptions;
Hosting community events and experiences;
Conducting analytics and performance monitoring;
Enforcing our Terms of Service and platform rules;
Complying with legal obligations including tax reporting, GDPR, and safeguarding requirements;
Sending marketing communications where legally permitted and with appropriate consent.

5. Legal Basis for Processing (EU GDPR)
We process personal data under one or more of the following legal bases as defined in Article 6 of the EU GDPR:

Contract performance (Article 6(1)(b)): to register accounts, process subscriptions, manage listings, operate the marketplace, and deliver coaching sessions as agreed.
Legal obligation (Article 6(1)(c)): to issue VAT-compliant invoices, comply with DAC7 digital platform reporting obligations, meet safeguarding requirements for minors, and fulfil tax and accounting obligations under Spanish and EU law.
Legitimate interests (Article 6(1)(f)): to maintain platform security, prevent misuse and fraud, improve the platform, and communicate with users about their accounts.
Consent (Article 6(1)(a)): where we use optional features, send marketing communications, or use non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
Vital interests (Article 6(1)(d)): where necessary to protect the safety of a Young Creator or another person, in accordance with our safeguarding obligations.

6. Special Protections for Minor Data (Young Creators)
Because the Young Creators section of ReConnect serves young people aged 13 to 18, we apply enhanced protections to all data relating to Young Creators, in accordance with Article 8 of the EU GDPR and the Spanish LOPDGDD (which sets the age of digital consent at 14 in Spain — we apply parental consent for all users under 18 on this platform):

We collect the minimum personal data necessary about Young Creators and do not collect data beyond what is needed to operate the platform safely.
Young Creators’ personal information is never displayed publicly. Listings show only the platform username and listing content.
We do not use Young Creators’ data for advertising, profiling, or marketing purposes.
We do not sell, share, or transfer Young Creators’ personal data to any third party except where strictly necessary to operate the platform (e.g. Stripe for payment processing) or where required by law.
All data relating to Young Creators is held securely and accessed only by the Platform Operator.
The Parent/Guardian has the right to access, correct, or request deletion of all data held about the Young Creator at any time.
Where there is a safeguarding concern relating to a Young Creator, we may share relevant information with appropriate authorities regardless of consent, in accordance with applicable law.

7. Marketplace and Seller Privacy
7.1 Seller Responsibilities
Sellers using ReConnect are independently responsible for complying with applicable privacy laws when collecting or processing customer data through their listings or sales. Sellers may only use buyer information for legitimate transaction-related purposes. Sellers may not sell personal data, use buyer data for unsolicited marketing, share customer data unlawfully, or collect unnecessary sensitive information.

7.2 Stripe Connect and Payment Data
All payment processing and financial data is handled exclusively by Stripe Connect (stripe.com). ReConnect does not store full payment card details, banking information, or financial identity documents. Payment data is processed by Stripe in accordance with Stripe’s own Privacy Policy and PCI-DSS security standards. ReConnect collects only basic account and billing information for administrative purposes.

8. Sharing of Personal Data
We do not sell personal data. We share personal data only in the following circumstances and only to the extent necessary:

Stripe, Inc.: for payment processing, Stripe Connect account management, and DAC7 earnings reporting. Stripe’s own Privacy Policy applies to data it holds.
Hosting and infrastructure providers: for secure platform operation.
Analytics providers: for platform performance monitoring, subject to appropriate data processing agreements.
Email delivery services: for sending invoices, platform notifications, and communications.
Customer support tools: where necessary to resolve user enquiries.
Legal and tax authorities: where required by applicable law, including the Agencia Tributaria (Spain) and other national tax authorities under the EU DAC7 Directive.
Professional advisers: legal, accounting, or compliance professionals, subject to confidentiality obligations.
Marketplace participants: where necessary and proportionate for completing transactions (e.g. seller name and username shared with buyer upon order confirmation).

We do not share personal data with advertisers, data brokers, or marketing companies.

9. International Data Transfers
ReConnect is operated from Spain within the European Economic Area (EEA). Some data may be processed by third-party service providers (such as Stripe) whose servers may be located outside the EEA. Where this occurs, we ensure that appropriate safeguards are in place in accordance with EU GDPR requirements, including Standard Contractual Clauses (SCCs) approved by the European Commission. For further information on international transfer safeguards, please contact us.

10. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including legal, tax, and compliance obligations:

Account data: retained for as long as the account is active, plus up to 3 years after account closure for legal and dispute resolution purposes.
Transaction and financial records: retained for a minimum of 5 years in accordance with Spanish and EU tax law.
Coaching session attendance records: retained for 2 years after the last session attended.
Marketing communications consent: retained until consent is withdrawn.
Support communications: retained for up to 2 years after resolution.

Upon account closure or at the end of the relevant retention period, personal data will be securely deleted or anonymised.

11. Security Measures
We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These include:

Encrypted data transmission (SSL/TLS);
Secure hosting infrastructure with access controls;
Authentication systems and password security requirements;
Fraud monitoring and abuse detection systems;
Payment security handled by Stripe to PCI-DSS standards;
Internal confidentiality obligations for all persons with access to personal data.

No online platform can guarantee absolute security. Users are encouraged to use strong, unique passwords and to notify us immediately if they suspect unauthorised access to their account.

12. Your Rights Under EU GDPR
Under the EU GDPR and Spanish LOPDGDD, you have the following rights regarding personal data we hold about you:

Right of access (Article 15): to request a copy of all personal data we hold about you.
Right to rectification (Article 16): to request correction of inaccurate or incomplete data.
Right to erasure — ‘right to be forgotten’ (Article 17): to request deletion of personal data, subject to our legal retention obligations.
Right to restriction of processing (Article 18): to request that we limit processing of your data in certain circumstances.
Right to data portability (Article 20): to receive your personal data in a structured, commonly used, machine-readable format.
Right to object (Article 21): to object to processing based on legitimate interests.
Right to withdraw consent (Article 7(3)): where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at aurelia@onlinevillage.com. We will respond within 30 days. Identity verification may be requested before fulfilling certain requests.

If you are not satisfied with our response, or believe we have processed your data unlawfully, you have the right to lodge a complaint with the Spanish data protection supervisory authority:

Agencia Española de Protección de Datos (AEPD)
Website: aepd.es
Address: C/ Jorge Juan 6, 28001 Madrid, Spain

Users residing in other EU member states may also contact their local national data protection authority.

13. Sensitive Information and Health-Related Discussions
Community discussions, coaching interactions, and user-generated content may involve topics relating to wellness, emotional wellbeing, personal development, creativity, confidence, parenting, or lifestyle. Users should avoid sharing sensitive personal information publicly unless they fully understand the risks of doing so.

Unless explicitly required for a specific service, ReConnect does not intentionally collect special categories of sensitive personal data under EU GDPR Article 9, including health data, biometric data, political opinions, religious beliefs, sexual orientation, or genetic data. Where such information is voluntarily shared by users within community spaces or coaching interactions, users do so voluntarily and at their own discretion.

14. Coaching, Education and Professional Services
ReConnect and the Online Village Community allow independent coaches, educators, facilitators, wellness practitioners, and service providers to offer services through the platform. ReConnect acts solely as a platform provider and marketplace facilitator. ReConnect does not independently provide medical, psychological (therapeutic), legal, or financial advice unless explicitly stated otherwise.

Service providers operate independently and are responsible for their own professional obligations.
ReConnect does not guarantee the qualifications, certifications, safety, effectiveness, or outcomes of any provider or service.
Any coaching, wellness, or educational content is for informational and educational purposes only unless otherwise expressly stated.
Users should seek qualified professional advice for medical, legal, psychological, financial, or other regulated matters.

15. Recorded Sessions and Community Events
Certain online events, coaching sessions, community gatherings, or webinars hosted through the Service may be recorded. Where recordings occur, participants will be notified in advance where legally required. Recordings may include audio, video, chat messages, usernames, and shared content. Users who participate consent to such recording where permitted by law. Requests regarding recorded content or removal may be directed to ReConnect.

16. Community Content and Public Information
Information shared publicly within community spaces on ReConnect may be visible to other platform members. This may include profile information, posts, comments, reviews, and uploaded content. Users are solely responsible for the information they choose to make public within the platform. ReConnect does not make community content publicly visible outside the platform without user consent.

17. Platform Safety, Moderation and Automated Systems
ReConnect may use automated systems, moderation tools, and fraud detection technologies to detect abuse, prevent fraud, improve safety, moderate harmful content, and improve platform functionality. Human review may occur where necessary. Users whose content or accounts are affected by automated decisions have the right to request human review by contacting us.

18. Marketing and Communications
We may send service announcements, security notifications, transactional messages, marketplace updates, community updates, and, where legally permitted and with appropriate consent, marketing communications. You may unsubscribe from marketing communications at any time using the unsubscribe link in any email or by contacting us directly. Withdrawal of marketing consent does not affect transactional or service communications.

19. Third-Party Services and Links
The Service may contain links to third-party websites, applications, or services. ReConnect is not responsible for the privacy practices, content, policies, or security of any third-party service. Users should review third-party privacy policies independently before sharing personal data with them.

20. Cookie Policy
ReConnect uses cookies and similar tracking technologies to operate the platform, improve user experience, and analyse usage. The following types of cookies may be used:

Essential cookies: strictly necessary for the platform to function. These cannot be disabled without affecting core functionality.
Functional cookies: remember your preferences and improve your experience.
Analytics cookies: help us understand how users interact with the platform so we can improve it.
Performance cookies: monitor platform speed and stability.

We do not use advertising or remarketing cookies to serve paid advertisements to users. On first visit, users are presented with a cookie consent banner in accordance with EU law. You may manage your cookie preferences at any time through the platform settings or your browser settings.

21. EU Consumer Rights
In accordance with EU Directive 2011/83/EU on consumer rights, users have the right to withdraw from this Agreement within 14 calendar days of registration as set out in the ReConnect Terms of Service. This Privacy Policy operates alongside and is subject to those consumer rights.

22. Account Closure and Data on Termination
Upon closure or termination of a ReConnect account, personal data will be retained only for as long as required by law or legitimate business purposes as set out in Section 10 of this Policy. Users may request deletion of their data subject to applicable legal retention obligations by contacting aurelia@onlinevillage.com.

23. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Where material changes are made, we will notify users by email to their registered address and update the “Last updated” date at the top of this document. Continued use of the Service after the effective date of any update constitutes acceptance of the revised Privacy Policy.

22. Contact Us
For any privacy-related questions, requests, or complaints, please contact:

ReConnect
Aurelia [SURNAME], Autónoma
Avenida Pintor Fernando Soria 8, 03540 Alicante, Spain
Email: aurelia@onlinevillage.com
Supervisory Authority: Agencia Española de Protección de Datos (AEPD) — aepd.es

ReConnect | Avenida Pintor Fernando Soria 8, 03540 Alicante, Spain | aurelia@onlinevillage.com
IMPORTANT: This document should be reviewed by a qualified solicitor or data protection specialist before publication.