Privacy notice

Back to the website

Privacy notice

Last updated: 13 October 2026

This notice explains what happens to the information you share on this website, in plain language.

Who is responsible for your data

Rosa F. Brissos, PhD
Vale da Amoreira 3, 6 Dto
8005-335 Faro, Portugal
info@rosafbrissos.com

What I collect, why, and where it goes

  • Booking a session: your name, email and anything you choose to add, used to schedule and hold the session. Handled by NeetoCal.
  • Paying for a session or program: your name, email and payment details, used to take payment and send receipts. Handled by ThriveCart, with payments processed by Stripe or PayPal. I never see your full card number.
  • Downloading a free guide: your email address, used to send the guide you asked for. Handled by MailerLite.
  • The Friday Joy Letter: your email address, only if you choose to subscribe. It arrives on Fridays with research, practice and reflections, and sometimes an announcement about something I’m offering. Every letter has a one-click unsubscribe link. Handled by MailerLite.
  • Applications, enquiries and reviews sent through website forms: what you write, used to reply to you and to assess fit. Handled by Basin, and stored with MailerLite, my email provider, so I can reply. You only receive the Friday letter if you subscribe to it.
  • Website analytics: pages visited, device type and approximate location, used to understand how the site is used. Handled by Google Analytics 4, and only after you accept statistics cookies in the cookie banner.

Legal basis

Bookings, payments and replies to your messages: to provide what you asked for. The Friday letter and analytics: your consent, which you can withdraw at any time. Invoices and accounting records: legal obligation.

Sensitive information

Please don’t send health details through website forms. If something sensitive is relevant to working together, we can talk about it in a session.

How long I keep it

  • Enquiries and applications that don’t lead to working together: up to 12 months.
  • Booking and session records: up to 3 years after our last session.
  • Invoices and accounting records: 10 years, as Portuguese law requires.
  • Friday letter subscription: until you unsubscribe.
  • Analytics data: up to 14 months.

Transfers outside the EU

Some of these providers are based in, or use subprocessors in, countries outside the European Union, such as the United States. Where that happens, transfers rely on recognised safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Cookies

Statistics cookies are only set after you accept them in the cookie banner. You can change your choice at any time; the cookie policy explains how.

Your rights

You can ask to see, correct, delete or receive a copy of your data, object to or restrict how it’s used, and withdraw consent at any time. Write to info@rosafbrissos.com and I’ll reply within one month. You can also complain to the Portuguese data protection authority, the CNPD (cnpd.pt).