What we know
Privacy, clear and written
We ask for the minimum and use it only to provide ALO.
This page explains what data we use, why we use it, who may process it and how to exercise your rights. What you share about cannabis use, mood or difficulties is not used for advertising or mixed with other projects.
THE ESSENTIALS
Only what is necessary.
Who is responsible
Albert Ariza, sole trader, SIREN 908 631 179, with a business address at 8 Impasse des Acacias, 66340 Osséja, France. ALO is the project name. For anything about privacy, write to hola@abrelosojos.vision.
What data are we talking about?
The data ALO needs to work: your email and account, purchase, payment and billing information, email delivery status, technical records that keep the website secure, anything you choose to note in My ALO and anything you choose to share when asking for help.
We don’t need your complete biography, and you don’t have to enter medical information in free-text fields. We ask only for what we need to provide the service, take payment, reply to you and keep the website secure.
A note, without having to identify yourself
On Contact, you can send a message without a name, account or email. Leave an address only if you would like a reply. We do not add your name, account email, user ID or My ALO notes to the message, even if you are signed in. The text you choose to send goes to Albert’s inbox in Google Workspace; it is not published and does not subscribe you to marketing messages. The website keeps technical security records to prevent abuse: sending without an email does not mean technical anonymity.
Why we use it, and on what legal basis
We use this data to provide what you have purchased: create your account, deliver the program, process payment, reply to you and resolve issues. We retain invoices to meet accounting obligations and technical records to protect the website and prevent abuse.
Optional communications and questionnaires rely on your consent. You can say no or change your mind without losing your purchase rights or access to what you have already bought.
Three optional, separate decisions
Your start date, time zone, email address and delivery time are operational data needed to provide ALO. Day 0 answers about cannabis use, concerns, previous attempts, scenes or a personal action; check-ins; and sensitive information you choose to send to support are three separate, optional purposes.
Before using data for any of them, we ask for explicit consent with no preselected boxes. You can continue through the general experience without answering Day 0 or completing check-ins. In My ALO, you can withdraw each consent separately: we remove the active data for that purpose and retain only a minimal, separate record—without your answers—to document your choice. Withdrawing consent does not erase invoices or prevent general contractual access.
If you request a refund within the applicable period, we check only the order, date, amount and status. We do not ask for a reason or for information about cannabis use or health.
When one person leaves it paid for another
The buyer enters only the name used to sign the gift; they do not enter the other person’s name, email, phone number or information about cannabis use. ALO creates an access reference and stores only a non-reversible cryptographic version of the private key. The complete key is shown to the buyer once and travels in the link fragment so that it is not included in server histories or analytics.
The recipient’s identity appears only when they choose to sign in with their own account and claim the access. At that point they receive one transactional email confirming what is already in their account. The buyer receives no open or claim confirmation, cannot see whether they start and has no access to their activity, answers, times, notes or conversations. After claim, the recipient may press once to send a short, voluntary thank-you to the email on the buyer’s account. That message reveals no product, start date or activity; if they do not press it, ALO sends nothing.
The minimum gift record links the order, product, buyer, visible signature, recipient after claim, language, status, thank-you status and dates needed to deliver or revoke access, handle a refund and prevent double use. It stores no dedication, free text or recipient email. The invoice and order follow fiscal retention periods; the access entitlement remains for as long as the product must be provided and is then deleted or anonymized under the general retention schedule and applicable obligations.
A conversation to get things in order
If you buy an individual 60-minute conversation, WooCommerce separately stores the payment, account, contact, scheduling and service-status data needed to provide it. Before paying, you can use a suitability check that runs entirely in your browser: your selection is not sent, saved or included in analytics.
After payment, you can explain everything during the call or send an optional form so Albert can prepare. That form may reveal information about cannabis use, emotional wellbeing or health, so it requires explicit, separate consent and no boxes are preselected. Responses and the agreed summary are encrypted before being stored in a private website table. They are not copied to order notes, a CRM, analytics, external working documents or AI tools.
You can view, correct, download or clear the context before talking without canceling the reservation. The form, map and work notes are deleted within 30 days after the call, with the exception of an open incident or a legal obligation. The order retains only the operative status, dates and minimum evidence of consent without duplication of responses.
WITHOUT FOLLOWING YOU
Checking whether it works does not require watching you.
Optional analytics on public pages
Google Analytics 4 loads only if you select “Accept analytics”. Before that decision, we do not request any resource from Google or send cookieless signals. “Necessary only” is given equal visibility, and you can change your mind at any time through “Privacy and cookies”.
If you accept, we count a visit to the public page. The data processed may include a random identifier in the _ga and _ga_* cookies, the URL and referrer without parameters, the page title, date and time, browser, device type and an approximate geographical area. Google uses the IP address to obtain that area and discards it before recording the event.
Visiting a website about cannabis may reveal an interest. That is why we do not measure My ALO, accounts, carts, checkout, purchases, forms, messages or private pages. We also do not send names, email addresses, phone numbers, cannabis use, cravings, mood, sleep or requests for help. Scrolls, clicks, searches, videos, downloads, forms, Google Signals, advertising and audience creation are disabled.
Search Console provides aggregated data about appearances and clicks on Google. Our own counter, without cookies or identity, summarizes some public visits by day. UTM tags indicate which link a visit came from; if it results in a purchase, WooCommerce may store that source with the order. Google Analytics does not receive those parameters and is not used to track the purchase.
The legal basis for these analytics is your consent. Refusing or withdrawing it does not limit the website or anything you have purchased. When you withdraw consent, we stop future transmissions and delete the analytics cookies that the browser allows us to remove.
Not in the emails either
The daily emails contain no tracking pixels to detect opens and no structured links to monitor each click. Resend, the service that delivers them, receives only what it needs to act as the courier: your address, the message and technical delivery data. It does not receive your personal notes, how much you use, how you feel or what you write in My ALO.
If you reply, we receive only what you choose to share. We use it to answer and manage your request, not for advertising or to create a commercial profile.
The channel is also part of the discretion
The daily support arrives by email. ALO does not use WhatsApp, groups or unsolicited phone calls to deliver the program, and the service does not generate physical deliveries to your home. You choose when to open an email or reply.
An email can display sender or preview according to your device’s settings. If that concerns you, you can silence notifications or hide the preview from email settings and ALO cannot change them for you.
PRACTICAL DECISIONS
How we protect your data.
How it’s protected
We apply concrete technical and operational decisions:
- not collecting data simply because a tool makes it possible;
- separating personal data from email delivery, sales and statistics;
- keeping advertising pixels, profiles and non-consensual measurement switched off;
- looking at overall trends instead of following individuals;
- deleting information that no longer needs to be kept; and
- providing an email address answered by a person.
WHO RECEIVES WHAT
The keys are not handed around the internet.
Providers and transfers
SiteGround hosts the website and the form’s encrypted storage; Google Workspace provides the operational mailbox and the private video call when a conversation is confirmed; Google Ireland Limited provides Google Analytics only after consent; Resend delivers the emails in the program; PayPal processes payments; and Amazon directly manages purchases made on its platform. Each provider receives only the data needed for its function.
The video call is set up without recording, transcription or AI assistance. The agreed summary is sent to the email address used for the order. That email thread may be used for one brief follow-up question for seven days; it is not copied to analytics or another profile. Any review date shown in the summary is a checkpoint chosen by the person, not an appointment or permission to contact them again.
Google Analytics may process data through infrastructure and subprocessors outside the European Economic Area under the applicable contractual safeguards. It is not linked to Google Ads and Google Signals remains disabled. Resend may process account data and delivery metadata in the United States, and some SiteGround subprocessors may access data outside the European Economic Area. When this occurs, the relevant contractual safeguards apply. PayPal receives the data needed to process the payment; ALO does not store your full card details.
How long?
As a general rule, ALO system data, daily check-ins and support messages are deleted or anonymized 90 days after the service ends, unless you ask us to do so earlier or there is an unresolved issue. For an individual conversation, the form, agreed summary and working notes have the shorter period stated above: no more than 30 days after the call. When you withdraw optional consent, we delete the active data used for that purpose sooner. Technical security records are kept for up to 90 days.
The analytics preference lasts for no more than six months. If you accept analytics, the _ga and _ga_* cookies also expire after no more than six months and their lifetime is not renewed with each visit. The Google Analytics property retains event and user data for two months, without resetting that period when there is new activity.
The invoices and vouchers are held for accounting and fiscal periods and may be up to ten years. Backup and vendor searches follow their security cycles, recovery and legal obligation and are not used for regular operation. If you order the deletion, we remove what’s no longer necessary and manage the request with appropriate providers.
Your checks
See, correct, take or erase.
Your rights
You can request access, correction, deletion, restriction, objection or portability where applicable. Write from your account email to hola@abrelosojos.vision and tell us what you need. We will ask for an additional check only if needed to confirm your identity. We normally respond within one month.
If something doesn’t match
We use restricted access, minimal data, backups and separate systems for support, purchases and personal program data. But no serious system should demand blind faith. If you think we have not respected your data, write to us. You can also complain to the French CNIL or the data protection authority in your place of residence.
A question about using ALO? How to use ALO →