Legal

Privacy Policy

Draft for review. Complete the items marked [to confirm] and have the final text reviewed against the GDPR (Regulation (EU) 2016/679) and Portuguese Law 58/2019. Last updated: [date].

1. Data controller

Raphael [full legal name, NIF, address], trading as Embrace Men Lisbon. Contact for privacy matters: WhatsApp (+351 923 125 625).

2. What data we collect

  • Contact and booking data you choose to share: name, phone number, email, preferred session and time, and any messages.
  • Health information you voluntarily share (e.g. allergies, injuries) so the session can be adapted safely. This is special-category data and is processed only with your explicit consent.
  • Technical data: your web host may keep standard server logs (IP address, browser, pages visited) for security [confirm with hosting provider].

The website's contact form does not store any data: it simply opens WhatsApp with your message prefilled, and you decide whether to send it.

3. Why we use it and legal basis

  • To respond to enquiries and manage bookings — steps prior to a contract / performance of a contract.
  • To adapt sessions to health considerations — your explicit consent.
  • To meet legal and tax obligations — legal obligation.

4. Third parties

Messages sent via WhatsApp are processed by WhatsApp (Meta Platforms Ireland Ltd.) under its own privacy policy. Emails are handled by [email provider, e.g. Microsoft Outlook]. The website is hosted by [hosting provider]. Fonts are loaded from Google Fonts [remove this line if fonts are self-hosted]. We never sell or share your data for marketing.

5. Retention

[to confirm: e.g. booking conversations kept for X months; invoicing records kept for the period required by Portuguese tax law.]

6. Your rights

You may request access, correction, deletion, restriction or portability of your data, object to processing, and withdraw consent at any time by writing to WhatsApp (+351 923 125 625). You also have the right to lodge a complaint with the Portuguese data protection authority, CNPD (cnpd.pt).

7. Confidentiality

Client information is handled with discretion and is never disclosed, subject to applicable legal obligations.