Privacy Policy
Last updated: 28 October 2026
Controller
This policy follows articles 13 and 14 of the General Data Protection Regulation (GDPR) and Portuguese Law 58/2019. The controller is:
- Name: Filipa Faustino
- Address: to be provided
- Email: info@filipafaustino.com
- NIF: to be provided
Contact for data questions
For any question about your data or to exercise your rights, write to info@filipafaustino.com. No data protection officer has been appointed, as none is required.
What we process, why, on what basis and for how long
| Who | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Visitors | IP address and technical request data; language and cookie choices kept in your browser | Serve the site securely and prevent abuse | Legitimate interest (art. 6(1)(f)) | Technical logs up to 30 days; rate limit records up to 1 day |
| Contact form | Name, email, subject, message, language | Answer your message | Pre-contractual steps or legitimate interest (art. 6(1)(b) and (f)) | Up to 2 years after the last exchange |
| Messages to therapists | Name, email and message sent to a therapist in the directory | Forward the message to the therapist without revealing her email | Your request and legitimate interest (art. 6(1)(b) and (f)) | Up to 2 years |
| Certified therapists | Identity, contacts, certificate number, levels, roles, photo, biography, languages, visibility choice, change history | Manage certification, the private area and the public directory | Performance of the certification agreement (art. 6(1)(b)); full public profile by the therapist's choice | While certified and up to 5 years afterwards; withdrawal history kept for the same period |
| Confidential reports | Session type and details, intention and observations; optional client name, contact, age range and situation. A name requires recorded client authorisation | Follow the practice and annual commitments, accessible only to the author and LVPT coordination | Performance of the certification agreement for practice records (art. 6(1)(b)); consent for optional client data (art. 6(1)(a)), including explicit consent where health data is revealed (art. 9(2)(a)) | Up to 5 years; optional client data until consent is withdrawn, unless an applicable legal obligation requires retention |
| Meeting attendance | Monthly attendance of each therapist | Follow the annual commitments | Performance of the certification agreement (art. 6(1)(b)) | Up to 5 years |
| Meeting photos | Images of the people present | Show the latest meeting discreetly | Consent (art. 6(1)(a)), which may be withdrawn at any time | Until consent is withdrawn or newer photos replace them |
| Acceptance of agreements | Document type and version, date, time and IP address | Prove acceptance of the Code of Conduct and agreements | Legitimate interest and proof obligations (art. 6(1)(c) and (f)) | While certified and up to 5 years afterwards |
| Training enrolments | Name, email, phone, country, city, language, edition, payment plan, previous certificate and document acceptance | Manage training enrolment, places and payments | Pre-contractual steps and contract performance (art. 6(1)(b)); invoicing obligations (art. 6(1)(c)) | During training and up to 5 years afterwards; fiscal documentation for the applicable statutory period |
| Payment proofs | Proof file, enrolment reference, payment amount and date | Verify and track payments; restricted to coordination | Contract performance and legal obligations (art. 6(1)(b) and (c)) | Up to 5 years after completion, unless a longer statutory period applies |
| Recommendations | Chosen public name, private email, text up to 600 characters, approximate session date and confirmation and approval status | Confirm authorship, moderate and publish the authorised experience | Consent (art. 6(1)(a)); explicit consent where the text reveals health data (art. 9(2)(a)) | Until consent withdrawal or removal request; unconfirmed or rejected recommendations up to 1 year |
| Agenda and news | Email, language and consent, confirmation and cancellation records, kept on this site with no external service | Send agenda and news only after subscription confirmation | Consent (art. 6(1)(a)) | Until cancellation, or until the coordination deletes an unconfirmed request |
| Personal certificates | Certificate PDF linked to the therapist's record | Make the certificate available only to its therapist and the administrator | Performance of the certification agreement (art. 6(1)(b)) | While certified and up to 5 years afterwards |
Where the data comes from
Therapists' data comes from the therapist herself and from the training records kept by Filipa Faustino. Reports are recorded by the therapist and visible only to her and LVPT coordination. Identifying client details are optional and the therapist must obtain authorisation before recording them.
Processors and transfers
We use providers that process data only on our behalf: the hosting service for the site and database (hosting, secure storage and delivery) and its email delivery service. Some of these providers are based in, or use infrastructure in, countries outside the European Union, notably the United States. Such transfers rely on the EU-US Data Privacy Framework adequacy decision where the provider is certified, or on the European Commission's standard contractual clauses. We do not sell data to anyone.
Your rights
To exercise any right, write to info@filipafaustino.com. We answer within one month.
- Access to your data
- Rectification
- Erasure
- Restriction of processing
- Portability
- Objection to processing based on legitimate interest
- Withdrawal of consent at any time, without affecting earlier processing
Complaints
You may lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.
Automated decisions
We make no solely automated decisions and do no profiling. Certification status is calculated from simple rules and can always be reviewed by the administrator.
Age
This site is intended for people aged 18 and over. We do not knowingly collect data from minors.
Last updated
Last updated: 28 October 2026