Cookies Policy
This policy explains what cookies are, how Northern Flow Yoga Academy S.L. uses them, and how you can manage your preferences.
Last Updated: February 8, 2026 · Effective Date: February 8, 2026
1. What Are Cookies?
Cookies are small text files that are stored on your device (computer, tablet, or smartphone) when you visit a website. They serve a variety of purposes, including remembering your preferences, enabling core website functions, and collecting information about how you interact with the site.
Cookies can be "first-party" (set by the website you are visiting) or "third-party" (set by a service provider used by the website, such as an analytics or advertising platform). They may be "session" cookies (deleted when you close your browser) or "persistent" cookies (stored on your device for a set period or until you delete them manually).
Northern Flow Yoga Academy S.L. ("we," "us," or "our") uses cookies and similar tracking technologies on this website. This Cookies Policy provides detailed information about the types of cookies we use, the purposes they serve, and the choices available to you.
2. Who Is the Data Controller?
The data controller responsible for the processing of your personal data through cookies on this website is:
Northern Flow Yoga Academy S.L.
Calle de Serrano 45
Salamanca, 28001 Madrid, Spain
Email: [email protected]
Phone: +34 91 123 4587
3. Cookie Categories We Use
We classify the cookies on our website into three distinct categories. Each category serves a different purpose, and not all require your consent to operate.
3.1 Essential Cookies
Always ActiveEssential cookies are necessary for the core functionality, security, and session management of our website. Without these cookies, the website cannot function properly, and certain features may become unavailable.
Purpose: Core site functionality, security, session management, and storing your cookie consent preferences.
Examples:
| Cookie Name | Purpose | Retention |
|---|---|---|
| session_id | Maintains user session across pages | Session |
| csrf_token | Protects against cross-site request forgery | Session |
| cookie_consent_status | Stores your cookie consent preference | 12 months |
Consent required: No. These cookies are activated automatically as they are strictly necessary for the website to operate.
Retention: Session duration or up to 12 months for preference storage.
3.2 Analytics Cookies
Analytics cookies help us measure traffic, understand user behavior, and evaluate site performance. This information is used to improve our website and educational services. These cookies are activated only after you provide consent.
Purpose: Measuring traffic, user behavior, page engagement, and overall site performance.
Tools: Google Analytics 4
Examples:
| Cookie Name | Purpose | Retention |
|---|---|---|
| _ga | Distinguishes unique users | 14 months |
| _ga_XXXXXXX | Maintains session state in GA4 | 14 months |
| _gid | Distinguishes users for 24-hour period | 24 hours |
| _gat | Throttles request rate to Google Analytics | 1 minute |
Consent required: Yes. Analytics cookies are activated only after you click "Accept All" or enable them through "Manage Preferences."
Retention: Up to 14 months.
3.3 Marketing / Advertising Cookies
Marketing cookies are used for remarketing, personalized ad delivery, and conversion tracking. These cookies allow us to measure the effectiveness of our advertising campaigns and deliver relevant advertisements to users who have previously visited our website.
Purpose: Remarketing, personalized advertising, and conversion tracking.
Platforms: Google Ads, Meta Pixel (Facebook / Instagram)
Examples:
| Cookie / Technology | Provider | Retention |
|---|---|---|
| Google Ads conversion tag (gtag.js) | Google LLC | Up to 540 days |
| Google Remarketing tag | Google LLC | Up to 540 days |
| Meta Pixel (_fbp, _fbc) | Meta Platforms, Inc. | Up to 90 days |
| IDE / DSID | Google (DoubleClick) | Up to 13 months |
Consent required: Yes. Marketing cookies are activated only after you click "Accept All" or enable them through "Manage Preferences."
Retention: Up to 540 days (Google Ads default).
4. Third-Party Advertising and Tracking Disclosures
Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website and other sites on the internet.
We may work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms.
We may use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our ads on other websites, apps, or platforms you visit.
Advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network.
Tracking Technologies
We use the following tracking technologies on this website:
- Cookies (first-party and third-party)
- Tracking pixels (Google Ads tag / gtag.js, Meta Pixel)
- Device identifiers (browser fingerprint, IP address)
- Conversion event tags
Advertising Measurement
We use conversion tracking to understand which advertisements lead to actions on our website, such as form submissions, calls, or purchases. This allows us to measure campaign effectiveness and allocate budget appropriately. Conversion data may be shared with Google Ads and Meta.
Technologies in Use
Advertising and analytics technologies active on this site:
- Google Ads (gtag.js / Google Tag Manager)
- Google Analytics 4
- Google Remarketing Tag
- Meta Pixel (Facebook / Instagram)
5. How We Obtain Your Consent
When you first visit our website, you will see a cookie consent banner at the bottom of the screen. This banner offers three options:
Accept All
Enables all cookie categories
Reject Non-Essential
Only essential cookies active
Manage Preferences
Toggle each category individually
By clicking "Accept All Cookies," you consent to the storing of cookies on your device for analytics and advertising purposes, including personalized advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.
Analytics and marketing cookies are not activated until you explicitly accept them. The cookie consent banner does not block or restrict access to the website content; you may dismiss it by clicking "Reject Non-Essential," which activates only essential cookies.
Your cookie preference is stored in your browser's localStorage for 12 months. After this period, you will be asked to confirm your preferences again.
Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.
6. Withdrawing Your Consent
You may withdraw consent at any time by clicking the "Manage cookie preferences" button below, or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred while consent was valid.
After withdrawing consent, marketing and analytics cookies will no longer be placed on your device. Existing cookies from those categories can be removed by clearing your browser cookies. Please note that clearing all cookies may also remove your consent record, causing the cookie consent banner to reappear on your next visit.
7. Opting Out of Personalized Advertising
You may opt out of personalized advertising at any time through the following external tools:
- Google Ads Settings: https://adssettings.google.com
- Your Online Choices (EU): https://www.youronlinechoices.eu
- Network Advertising Initiative: https://optout.networkadvertising.org
- Digital Advertising Alliance: https://optout.aboutads.info
- Meta Ad Preferences: https://www.facebook.com/adpreferences/
Opting out does not remove ads entirely. You will continue to see non-personalized advertisements when browsing the internet.
8. Data Sharing with Advertising Partners
We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:
Google LLC
Cookie identifiers, conversion events, anonymized behavioral data, and remarketing lists. Governed by Google's Privacy Policy: https://policies.google.com/privacy
Meta Platforms, Inc.
Pixel events, conversion data, and custom audiences. Governed by Meta's Data Policy: https://www.facebook.com/privacy/policy
We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for ad targeting and campaign measurement only and is not resold to unaffiliated third parties.
Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly.
9. Google Services Detail
This website uses the following Google services:
-
Google Analytics 4
Collects anonymized usage data, device info, and behavioral signals. IP anonymization is enabled. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
-
Google Ads Conversion Tracking
Records when a user completes a defined action (form submission, call) after clicking one of our ads. This data is used solely for measuring ad campaign performance.
-
Google Remarketing
Allows us to show ads to previous visitors across Google's network. Remarketing lists are not created from sensitive data categories (health, finance, religion, sexual orientation).
-
Google Tag Manager
Deploys tracking tags on our behalf. No personal data is collected by GTM itself; it acts as a container for the tags listed above.
Google's advertising products are governed by: https://policies.google.com/technologies/ads
10. Meta Advertising Services
This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record:
- Page views and time on site
- Specific conversion events (form submissions)
- Custom audience membership for retargeting purposes
We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.
Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy: https://www.facebook.com/privacy/policy
To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/
11. Managing Cookies in Your Browser
In addition to our cookie consent panel, most web browsers allow you to manage cookies through their settings. You can typically:
- View which cookies are stored on your device
- Delete individual cookies or all cookies at once
- Block cookies from specific websites or all websites
- Configure your browser to prompt you before accepting cookies
Please note that disabling or blocking certain cookies may affect the functionality of this website. Essential cookies cannot be disabled through our cookie consent panel, but they can be blocked through browser settings (which may impair your ability to use the website).
For instructions on how to manage cookies in your specific browser, consult your browser's help documentation or settings menu.
12. International Data Transfers
Personal data collected through cookies on this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.
These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly at [email protected].
13. Your Rights Under GDPR
If you are located in the European Economic Area, the United Kingdom, or Spain, you have the following rights regarding the data collected through cookies:
To exercise any right, email us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Espanola de Proteccion de Datos, AEPD) at https://www.aepd.es, or with your local supervisory authority if you are in a different EU member state.
14. Legal Basis for Processing
The legal basis for using cookies on this website depends on the cookie category:
| Cookie Category | Legal Basis (GDPR) |
|---|---|
| Essential cookies | Legitimate interest (Art. 6.1.f) - necessary for website operation |
| Analytics cookies | Consent (Art. 6.1.a) |
| Marketing / Advertising cookies | Consent (Art. 6.1.a) |
15. Retention Periods
Cookies and tracking data are retained for the following periods:
| Data Category | Retention Period |
|---|---|
| Essential cookies (session) | Browser session or up to 12 months |
| Analytics data (GA4) | 14 months |
| Marketing cookies (Google Ads) | Up to 540 days |
| Meta Pixel cookies | Up to 90 days |
| Cookie consent records | 3 years (audit requirement) |
16. Children's Privacy
This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors through cookies or any other means. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at [email protected] if you believe we have received data from a minor.
17. Changes to This Cookies Policy
We may update this Cookies Policy from time to time to reflect changes in our use of cookies, applicable regulations, or operational practices. When we make changes, we will update the "Last Updated" date at the top of this page.
Changes will be notified via a homepage banner a minimum of 14 days before taking effect. We encourage you to review this policy periodically to stay informed about how we use cookies.
18. Applicable Law and Jurisdiction
This Cookies Policy is governed by and construed in accordance with the laws of the Kingdom of Spain, including the Ley Organica de Proteccion de Datos Personales y garantia de los derechos digitales (LOPDGDD) and the General Data Protection Regulation (EU) 2016/679 (GDPR).
Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Madrid, Spain.
19. Contact Us
If you have any questions about this Cookies Policy or how we use cookies, please contact us:
Northern Flow Yoga Academy S.L.