Privacy Policy

1. Who the controller is

The data controller is [NOME LEGAL OU EMPRESA], tax number [NIF / NIPC], registered at [MORADA COMPLETA], Portugal.

For anything concerning your data, write to [E-MAIL DE CONTACTO]. We reply within one month at the latest.

2. The short version, before the detail

This site sets no cookies, performs no tracking, and loads nothing from third parties. Fonts and animation libraries are hosted on our own server precisely so that your IP address is not sent to Google or to content delivery networks.

We only hold data about you if you write to us. Browsing here leaves no identifiable trace on your side.

3. What data we handle

Data you give us to generate the book: full birth name, date of birth, time of birth and city/country of birth. Optionally gender, for grammatical agreement in the text.

Contact data: your WhatsApp number and, if you use it, your email — together with the content of our conversation.

Invoicing data: name and tax number, where legally required to issue an invoice.

Payment data: handled directly by the payment provider. We never receive or store your card details.

Server data: our hosting records HTTP requests (including IP address) for security and operational reasons, for short periods and without linking them to you.

4. A note on special categories

We do not ask you for health data, religious, philosophical or political beliefs, ethnic origin, trade union membership, sex life or sexual orientation, and we ask that you do not send us information of that kind.

The book contains wellbeing sections touching on lifestyle themes. These are generated from your birth data — not from any health information about you — and do not constitute clinical assessment.

5. Why we use the data, and on what basis

To generate and deliver your book — performance of the contract, Article 6(1)(b) GDPR. Without this data the book cannot exist.

To talk with you before and after the purchase — performance of the contract and pre-contractual steps at your request, point (b).

To meet tax and accounting obligations — legal obligation, point (c).

To keep your book so you can request it again — legitimate interest in supporting you, point (f), or your consent where we ask for it. You may object at any time.

To establish, exercise or defend legal claims — legitimate interest, point (f).

We do not use your data for advertising, commercial profiling, or automated decisions producing legal effects. Should we ever wish to send you marketing, we will ask for separate consent, which you may withdraw at any time.

6. How long we keep it

Birth data and the generated book: for the duration of the relationship and up to 3 years afterwards, so you can request a reissue. If you ask us sooner, we delete sooner.

WhatsApp conversations: up to 2 years, as a support history.

Invoicing and accounting: 10 years, as required by law — this period cannot be shortened on request.

Server logs: short periods set by the hosting provider, as a rule no longer than 30 days.

7. Who else has access

We do not sell, rent or trade your data. We share only with those strictly necessary for the service to work, always under a processing agreement:

Vercel Inc. — hosting of this website.

WhatsApp Ireland Ltd. / Meta — the channel where we talk to you. Messages are end-to-end encrypted, but communication metadata is processed by Meta under its own policies, which we do not control. If you prefer not to use WhatsApp, talk to us by email.

Payment provider — processes the transaction as an independent controller.

Accountants — for compliance with tax obligations.

We may also disclose data to authorities where the law requires it.

8. Transfers outside the EU

Some of these providers are based in the United States. Where an international transfer occurs, it relies on an adequacy decision of the European Commission (EU-US Data Privacy Framework) or on standard contractual clauses, with the applicable supplementary safeguards.

You may ask us which safeguards are in place for each provider.

9. Cookies and similar technologies

This site sets no cookies, uses no browser local storage, carries no social network pixels and runs no analytics tools.

That is why you will not see a consent banner here: there is nothing to consent to. Should that ever change, we will ask for your consent before installing anything.

10. Your rights

You have the right to: access your data; have it rectified if wrong; have it erased; restrict processing; object to processing based on legitimate interest; and to portability of the data you gave us.

Where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise any of these rights, write to [E-MAIL DE CONTACTO]. There is no charge and we reply within one month, extendable by two further months in complex cases, with notice to you.

Erasure may not cover data we are legally required to retain — typically invoicing.

11. Complaining to a supervisory authority

If you believe we have mishandled your data we would like to hear from you first. But you may complain directly to a supervisory authority:

Portugal: CNPD — Comissão Nacional de Proteção de Dados, cnpd.pt.

Poland: UODO — Urząd Ochrony Danych Osobowych, uodo.gov.pl.

Brazil: ANPD — Autoridade Nacional de Proteção de Dados, gov.br/anpd.

You may also complain to the authority of your country of habitual residence or of the place of the alleged infringement.

12. Security

This site is served exclusively over HTTPS. Access to your data is limited to those who need it to deliver the service.

No system is infallible. If a data breach occurs that is likely to result in a high risk to you, we will notify you and report it to the competent authority within the statutory deadlines.

13. Minors

The service is intended for people aged 18 and over, and we do not knowingly collect data about minors.

If birth data of a minor is sent to us, we assume the sender is entitled to do so. If you know that a minor’s data was given to us without that entitlement, tell us and we will delete it.

14. Changes to this policy

If we update this policy we publish the new version here with a new date. Material changes are communicated to anyone with an order in progress.

This is a translation provided for information. In case of divergence between language versions, the Portuguese version prevails.