Privacy policy

Suzy-Laura Rodrigues, NIF 267636709, based in Albufeira, Portugal. I handle the data myself: there is no customer service team and no commercial processor.

When you contact me, I collect your name, your phone number, your email address and the content of your message, including the massage, date and place you have in mind.

When you send a request from the Book page, it opens in WhatsApp or your email, as before, and it is also sent to me directly so that I can record it and arrange your session. It contains your name, phone number, email address, the treatment, date and town you have chosen, your message and, if you provide them, details of how to get to you. If you book for someone else, it also contains their name and, if you give them, their phone number and your relationship to them: please let them know. I will tell them myself no later than the first session.

This processing is based on the steps needed before the session you are asking for (GDPR, Article 6(1)(b)), which is why there is no box to tick.

The Events and Hotels forms do not send anything: they draft your request and open it in WhatsApp or your email, and the site keeps nothing.

This is used only to reply to you, to arrange the session and, where applicable, to issue an invoice. It is never used for marketing, and never sold.

Before a first session, you fill in a short health questionnaire. It is used to adapt the massage and, in some cases, to decide against it.

Before later sessions, a shorter questionnaire asks only what has changed.

You fill it in online, on a page of this site, or, if you prefer, on paper: I then type it in myself.

It opens with a personal link: this link lets the page show your first and last name, without them appearing in the address.

Your answers are health data. I only collect them with your explicit consent, which you give by ticking a box before sending. You can withdraw it at any time.

The site does not keep them: they are sent, encrypted, to my database, into a reserved space kept separate from your contact details and your bookings. Only I read them; the person who manages the server on my behalf only accesses it for technical maintenance.

I only look at your questionnaire to prepare your sessions, and I let you know: the message confirming your booking says so.

For a minor, the questionnaire is filled in with a parent or legal guardian, who gives their consent and attends the session.

Requests sent from the Book page and WhatsApp or email messages that lead nowhere are deleted after twelve months.

The health questionnaire is deleted three years after your last session.

Other information relating to a session that took place is kept for the duration of our relationship, and then for as long as Portuguese accounting and tax obligations require.

Backup copies are kept for twelve months at most.

With no one, except where the law requires it or an accounting obligation makes it necessary. Your answers to the health questionnaire are never passed on to anyone.

I am the only person who reads requests sent from the Book page. They are stored on my server, rented from Hostinger and located in the United Kingdom (Manchester), a country recognised by the European Union as providing an adequate level of data protection. Hostinger backs it up every week, in Germany, and an encrypted copy is made every night on a personal storage server (NAS) in Portugal.

Hostinger, which rents out the server, acts only as a technical host.

The messages you send me travel through whichever service you choose — WhatsApp, your email provider, or your phone operator. Those services apply their own rules, over which I have no control.

This site sets no cookies and uses no third-party trackers. There is no advertising, no embedded social media buttons and no third-party maps.

To see which pages are read, I use Umami, open-source analytics software hosted on my own server, located in the United Kingdom, at stats.suzylaurawellness.com. It sets no cookies, shares nothing with any third party and is not used for advertising.

What is measured: pages viewed, the site the visit came from, the type of device and screen size, the browser, the operating system, the language, the country and, where applicable, the approximate region or city. What is not: the parameters in the address, and the pages of the health questionnaire, where the tool is never loaded.

At the time of the visit, the location is derived from your IP address, which is also used to calculate an anonymous identifier renewed every month; the IP address is not stored in the statistics. Like any web server, the server keeps technical logs for a limited time, which may contain the IP address, for security and to keep the service running properly.

Statistics are kept for 25 months at most, then deleted.

If your browser sends the “Do Not Track” signal, your visit is not measured.

The fonts are hosted on the site itself: your browser contacts no outside server to load them.

You may ask to see the information I hold about you, to have it corrected or deleted, or to object to its use, and withdraw your consent to the health questionnaire at any time. Simply write to me: I reply within 24 hours and handle the request free of charge.

These rights also belong to the person you booked for.

If my answer does not satisfy you, you may refer the matter to the Comissão Nacional de Proteção de Dados, the Portuguese data protection authority: www.cnpd.pt.