Privacy Policy

Effective Date: June 1, 2026
Last Updated: June 1, 2026

This Privacy Policy describes how Woman CEO, LLC ("RYL Abroad," "we," "us," or "our") collects, uses, and protects your personal information when you visit rylabroad.com or use our services.

We are based in Spain (European Union) and comply with the General Data Protection Regulation (GDPR). We also extend relevant rights to residents of California (CCPA) and all other users regardless of location.

1. Information We Collect

Information you provide directly:

Name and email address (when joining our email list or purchasing)
Payment information (processed by Stripe — we do not store card details)
Booking details (collected via TidyCal when scheduling a session)
Any information you share in forms, intake documents, or direct communications

Information collected automatically:

Pages visited, time on site, referring URLs
Device type, browser, and IP address
Cookie and tracking data (see Section 6)

2. How We Use Your Information

Deliver purchased products and services
Send transactional emails related to your purchase or session
Send marketing emails, updates, and content (with your consent)
Improve our website and service offerings
Comply with legal obligations

We do not sell your personal data. Ever.

3. Legal Basis for Processing (GDPR)

Contract: To fulfill a purchase or service you have requested
Legitimate Interest: To improve our services and communicate with existing clients
Consent: For marketing emails and cookies (you may withdraw consent at any time)

4. Third-Party Services

We work with: Stripe (payments), Resend (email), TidyCal (booking), Supabase (data storage), Cloudinary (images), Bunny.net (video), Google Analytics/Drive (analytics and document storage), and Anthropic API (AI features). Each operates under its own privacy policy. We only share the minimum data necessary for each service to function.

5. Data Retention

We retain your personal data for as long as necessary to deliver services and meet legal obligations. If you request deletion of your data, we will act on that request within 30 days, subject to any overriding legal requirements.

6. Cookies

Essential cookies — Required for the site to function
Analytics cookies — Used to understand how visitors use the site
Marketing cookies — Used to track the performance of our offers

You may disable cookies through your browser settings. Doing so may affect some site functionality.

7. Your Rights

Access the personal data we hold about you
Correct inaccurate data
Delete your data ("right to be forgotten")
Restrict or object to how we process your data
Portability — receive your data in a machine-readable format
Withdraw consent for marketing at any time

To exercise any of these rights, email us at arnitha@rylabroad.com. We will respond within 30 days. To unsubscribe from marketing emails, click the unsubscribe link in any email we send.

8. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell personal information. To submit a request, contact us at arnitha@rylabroad.com.

9. Children's Privacy

Our services are intended for adults. We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor has submitted information to us, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of our site or services after any update constitutes acceptance of the revised policy.

11. Contact

Email: arnitha@rylabroad.com
Website: https://www.rylabroad.com