Privacy & Cookie Policy
Last updated: 10 August 2026
1. Data controller
Data controller: Beatriz Noivo, Clinical Psychologist (CP 30925 | ERS E177683), with a practice in Mafra, Portugal. For any question about this policy or your data, contact: beatriznoivo.psicologia@gmail.com.
2. What we collect
- Anonymous browsing: this site is mostly static. Contact happens via Instagram and Linktree. This site does not collect clinical data. Personal data processed in the course of providing psychology services is managed separately, in accordance with the GDPR and applicable law.
- Technical logs: for security and operation, the server keeps logs with a request id and an anonymised IP address.
- Analytics (optional): only with your consent, we collect aggregate usage statistics (page views, clicks), without identifying you.
3. Purposes and legal bases
- Site operation and security — legitimate interest (Art. 6(1)(f) GDPR).
- Analytics — consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
- Providing psychological care — performance of a contract (Art. 6(1)(b)), compliance with legal obligations (Art. 6(1)(c)), and processing of health data under Art. 9(2)(h) GDPR.
4. Cookies
We use the minimum of cookies. Essential ones are strictly necessary and exempt from consent; analytics cookies are only enabled if you consent. Essential cookies cannot be disabled because they are required for the site to work.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
psilab_session | Session / security (CSRF) | Essential | Session |
locale | Language preference | Essential | 1 year |
psilab_consent | Stores your cookie choice | Essential | 6 months |
| (analytics) | Analytics cookies vary depending on the tool used. | Optional | — |
5. Data sharing and processors
Your data is not shared with third parties for marketing, and is never sold. We do, however, use service providers who process data on our behalf as processors, under contracts concluded in accordance with Article 28 of the GDPR:
- Website and database hosting — Hetzner Online GmbH, with servers in Germany.
- Appointment confirmation messages — Brevo, an email delivery provider. This applies only to people attending consultations, not to website visitors.
These processors handle data only on our instructions and do not use it for their own purposes. Data is not transferred outside the European Economic Area (EEA); should that ever become necessary, it will be done with the appropriate safeguards provided for under the GDPR.
6. Retention
- Technical logs: up to 30 days.
- Consent records: as long as needed for proof (typically up to 5 years).
- Analytics statistics: aggregated, retained for 24 months.
- Clinical data: for the legal periods applicable to clinical practice.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability, and objection, the right not to be subject to solely automated decisions, as well as the right to withdraw consent at any time. To exercise them, contact beatriznoivo.psicologia@gmail.com. You also have the right to lodge a complaint with the supervisory authority: Comissão Nacional de Proteção de Dados (CNPD).
8. Data Protection Officer
No Data Protection Officer has been appointed, as there is no legal obligation to do so.
9. Changes to this policy
This policy may be updated. When changes affect cookies or purposes, we will ask for your consent again.