Book now

Data protection

Privacy policy

This policy explains how personal data is handled when you visit the website or request an appointment.

Last updated:

The provider identified below is the controller of personal data collected through this website.

  • Identity and contact data: name, email address and, when provided, telephone number.
  • Booking data: service, duration, price, date, time, booking status, and optional logistical notes.
  • Communications relating to a booking request, confirmation, change, or cancellation.
  • Technical and security data needed to operate and protect the service, such as IP address, date, time, server requests, and basic browser information.
  • In-person payment and invoicing records where applicable. The website does not collect card details.

Booking data is not used for marketing without separate, specific, and optional consent.

  • Receiving, assessing, and confirming booking requests and providing the requested service: steps before entering into a contract and performance of a contract.
  • Sending operational booking messages: steps before entering into a contract and performance of a contract.
  • Issuing and retaining accounting records or responding to authorities: compliance with legal obligations.
  • Protecting the website, preventing misuse, maintaining technical logs, and defending legal claims: the controller’s legitimate interests, balanced against the individual’s rights.

The notes field is for logistical information only. Do not include symptoms, diagnoses, injuries, pregnancy, medication, or other health information. If safety or contraindications need to be discussed, use the contact channel provided after the booking is confirmed.

A name and email address are necessary to process and answer a request. A booking cannot be completed without them. The telephone number and notes are optional.

Data may be processed by hosting, database, email delivery, IT maintenance, and calendar providers acting for the controller, and by accountants, advisers, or authorities when necessary or legally required.

Providers acting as processors must be bound by contract and may only process data on documented instructions.

If a provider processes data outside the European Economic Area, the transfer will only occur under an applicable legal mechanism, such as an adequacy decision or Standard Contractual Clauses, with supplementary safeguards where necessary.

Personal data associated with booking requests and appointments is retained for 2 years after completion, cancellation, or the last relevant interaction and is then deleted or anonymised, unless longer retention is necessary to meet a legal obligation or establish, exercise, or defend legal claims.

Legally required accounting records and supporting documents are retained for 10 years. This does not mean that all operational booking data is kept for the same period.

  • Request access to, correction of, or deletion of personal data.
  • Request restricted processing or object to processing where applicable.
  • Receive portable data when the legal requirements are met.
  • Withdraw consent at any time for processing based on consent, without affecting earlier processing.
  • Lodge a complaint with Portugal’s Comissão Nacional de Proteção de Dados (CNPD).

The public website does not currently use analytics, advertising, or personalisation cookies. Mechanisms strictly necessary for security and authenticated areas may be used. If optional technologies are added, this policy will be updated and consent will be requested before they are used.

Technical and organisational measures appropriate to the risk are used, including access controls and protected communications. No system is completely risk-free.

This policy may be updated when the service, suppliers, or legal requirements change. The date at the top identifies the current version.