Privacy policy
Last updated: July 2026
Who we are / data controller
The controller responsible for processing personal data collected through this website is the owner identified in our Legal notice: Potencia Digital, NIF 23302634T, Spain.
For any question about this policy or your personal data, write to us at hola@zubibook.com.
What data we collect and why
Contact / sign-up form
When you fill in the Zubibook form to request information or your first workbook, we collect:
- Email: so we can reply to you and, where applicable, send you the generated workbook.
- "Profile" field: a free-text description you write yourself (for example, "8-year-old girl, dyslexia"), used solely to personalise the workbook content.
- Selected plan: to know which product interests you and advise you accordingly.
The legal basis for this processing is your consent, given by ticking the form's checkbox (Art. 6(1)(a) GDPR), and, for responses prior to a possible contract, it may also rely on the performance of pre-contractual steps requested by you (Art. 6(1)(b) GDPR).
About the "difficulty" field (dyslexia, ADHD or autism): this is a characteristic self-declared by the adult filling in the form, not a medical diagnosis. It is used solely to personalise the workbook's pedagogical content.
Zubibook does not collect health data, medical records or official diagnoses. We handle it with the utmost care, as if it were a specially sensitive data category, precisely because it is close to that category, even though it isn't one in the strict sense: it is simply the description that you, as a parent, guardian or professional, give us about what you're looking for.
We never ask for the child's name. We only collect the age range, the type of difficulty and the language, always in the abstract and with no data identifying a specific minor. The data subject is always the adult who fills in the form — the responsible adult — never the child for whom the workbook is generated.
Server logs
Like any web service, our server automatically and temporarily logs the IP address of visits for security reasons (detecting abuse, attacks or malfunctions). The legal basis is our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR).
Retention period
Data from requests and leads received through the form is kept for a maximum of 12 months, after which it is securely deleted unless there is an active contractual relationship with you. Email correspondence is kept for as long as necessary to assist you or as required by applicable law.
Your rights
You can exercise the following rights over your personal data at any time:
- Access: find out what data of yours we process.
- Rectification: correct inaccurate data.
- Erasure: request that we delete your data.
- Objection: object to a specific processing activity.
- Portability: receive your data in a structured format.
- Restriction: request that we restrict processing in certain cases.
To exercise any of these rights, write to us at hola@zubibook.com stating which right you wish to exercise. If you believe we have not handled your request correctly, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), at www.aepd.es, or with your own country's supervisory authority.
Recipients and data processors
Form data is processed through an automation workflow (n8n) hosted on our own infrastructure, which manages receipt of the request and communication with our team. We do not sell or share your data with third parties for commercial or advertising purposes.
International transfers
We do not transfer data outside the European Economic Area (EEA) unless stated otherwise in this policy.
Analytics
We currently have no active analytics on this site. If we activate Plausible Analytics in the future (self-hosted, cookie-free, no personal data), we will state so here first.
Minors
The Zubibook form is designed to be filled in by an adult (parent, legal guardian or professional), not by the child. The data subject is always that adult, never the minor.
As stated above, we never ask for the child's name: we only collect, in the abstract, the age range, the type of difficulty and the workbook language.