Skip to content
mentes cristalinas

Privacy Policy

Last updated: 2026-07-27

This English translation is provided for convenience. In case of divergence, the Portuguese version prevails.

Who is responsible

The controller for the data collected on this website is Isabel Fernandes (MentesCristalinas), Psychologist, professional licence no. 26660 issued by the OPP (Ordem dos Psicólogos Portugueses, the Portuguese Psychologists' Association), with a practice in Setúbal. For any question about your data, please use the contact form.

What data we collect, and why

  • Contact and proposal request forms — name, email and whatever you write to us. We use them only to reply to your request. Legal basis: pre-contractual steps taken at your request.
  • Session booking — name, email and phone number, for diary management, confirmations and reminders. The booking system is our own and the data is processed on our own infrastructure — it does not pass through third-party scheduling services. Legal basis: pre-contractual steps.
  • "Cristalina" newsletter — email, with two-step confirmation (double opt-in). Legal basis: your consent, which you may withdraw at any time with one click at the end of each letter.
  • Programme waiting list — name and email, used only to let you know when dates become available.

What we do not collect

The forms on this website are not intended for health data — we expressly ask you not to describe your clinical situation on this site. Clinical data lives only in the clinical record, protected by professional confidentiality, outside this website.

Cookies and statistics

We use Google Analytics solely for visit statistics (which pages help the most) — no advertising, no remarketing, no profiling. It runs in consent mode: it only uses cookies if you accept them in the notice shown on your first visit; if you decline, we receive only aggregate counts, with no cookies and no individual identification. You can change your mind by clearing this site's data in your browser — the notice will then appear again.

Who we work with (processors)

Hosting and infrastructure: Cloudflare (under a data processing agreement; transparency note: part of the infrastructure has a preferred European Union location, which is not contractually guaranteed for all services). Transactional emails (booking and sign-up confirmations): Brevo (based in the EU, under a data processing agreement). Visit statistics: Google Analytics, only with your consent (see the section above). Should other processors come to be used, this section will be updated before they enter into service.

How long we keep your data

Contact and proposal requests: up to 12 months after the matter is closed. Newsletter: for as long as you remain subscribed. You may request deletion at any time.

Your rights

Under the GDPR (General Data Protection Regulation, known in Portugal as RGPD), you have the right to access, rectify, erase, restrict and object to the processing of your data, and the right to data portability. To exercise these rights, use the contact form. You also have the right to lodge a complaint with the CNPD (Comissão Nacional de Protecção de Dados, the Portuguese data protection authority — cnpd.pt).

My areaBook a call