El texto legal está publicado en inglés.
Last updated: 10 September 2026
Who we are
Chika Moments ("we", "us") runs an invitation-based members' community for women in Madrid. We are the data controller for the personal data described here. You can reach us any time at inside@chikamoments.com.
What we collect
Waitlist: your email address and, if you share it, your Instagram handle.
Membership application: first and last name, email, phone, Instagram handle, birthday, your answers about yourself and your interests, and how you heard about us.
Member account: your login email and encrypted password, your profile details, your bookings for Moments and whether you attended.
Payments: your subscription and payment status, the amount paid and a Stripe reference. We never see or store card numbers.
Email delivery: a record of the emails we have sent you and whether they were delivered.
We do not run advertising or analytics tracking, and we do not build profiles of your browsing behaviour.
Why we use it and on what legal basis
To review your application and run your membership — performance of our contract with you.
To take payment for membership and for paid Moments — contract.
To send you service emails (application received, invitations, booking confirmations, changes) — contract and our legitimate interest in running the community.
To send you the newsletter or waitlist updates — your consent.
To keep records for accounting and to protect the community — legal obligation and legitimate interest.
Cookies and similar technologies
We do not use advertising, analytics or tracking cookies, so there is no tracking consent banner on this site. We only use what is strictly necessary to make it work:
A secure sign-in token stored in your browser so you stay logged in to the member area.
A small note in your browser remembering that you have already seen our newsletter invitation, so it is not shown again.
Cookies set by Stripe on its own payment pages to process your payment securely and prevent fraud.
You can clear these at any time in your browser settings; clearing the sign-in token simply logs you out.
Who we share it with
We only share data with the service providers we need to run Chika Moments:
Stripe — payments, subscriptions and card details, which are handled entirely on Stripe's own systems.
Our hosting and database provider — storing your account, application and booking data in the EU.
Our email provider — sending the emails described above.
Google Fonts and OpenStreetMap — loading the fonts on this site and the map on the Madrid Guide; your IP address is visible to them when those load.
We never sell your data and never share it with advertisers. Where a provider processes data outside the EU, it does so under the European Commission's standard contractual clauses.
How long we keep it
Applications and member records are kept for as long as you are part of the community and for up to two years afterwards, so we can recognise you if you return. Payment and invoicing records are kept for the period Spanish tax law requires (currently six years). Waitlist and newsletter details are kept until you unsubscribe or ask us to delete them.
Your rights
Under the GDPR you can ask us for a copy of your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time. Email inside@chikamoments.com and we will respond within one month. If you are not happy with our answer, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).
Keeping your data safe
Access to member data is restricted to our team, protected by individual logins and database-level access rules. Payment card details are handled only by Stripe, a PCI-DSS certified provider. Passwords are stored encrypted and never visible to us.
Changes and contact
If we change this policy we will update the date at the top and, for significant changes, tell members by email.
Chika Moments
Email: inside@chikamoments.com
Instagram: @chika.moments