Privacy policy

Last updated: February 2026

1. Data controller

Express My Health (hereinafter, “EMH”)
Email: info@expressmyhealth.com
Location: Barcelona, Catalonia, Spain

2. Data we collect

a) Voluntarily provided data

When you use our contact form, we collect your name, email address, the preferred time slot and the message you send. This data is processed exclusively to respond to your request.

b) Browsing data

We may collect non-identifiable technical data such as anonymised IP address, browser type, operating system, pages visited and visit duration, through analytics cookies.

3. Purpose and legal basis

• Handling contact requests: legal basis: data subject’s consent (Art. 6(1)(a) GDPR).
• Website usage analysis: legal basis: legitimate interest (Art. 6(1)(f) GDPR) to improve our services.

4. Recipients

Your data will not be shared with third parties, except where legally required. Contact form emails are sent via Resend, whose privacy policy can be consulted on its website.

5. International transfers

Some service providers may be located outside the European Economic Area. In such cases, we ensure adequate safeguards are in place in accordance with the GDPR.

6. Retention period

Contact data will be retained for the time necessary to handle your request and, in any case, a maximum of 12 months from the last communication. Anonymised browsing data is retained for a maximum of 26 months.

7. Data subject rights

You have the right to access, rectification, erasure, restriction of processing, portability and objection. To exercise these rights, write to info@expressmyhealth.com with “Data Protection” in the subject line. You may also complain to the Spanish Data Protection Agency.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction.

9. Amendments

We reserve the right to update this privacy policy. The date of the last update is shown at the top of this page.