Privacy and cookie policy

Last updated: 29/10/2026

1. Who handles your data

Data controller: Lorena Nemes, operating the Casa Swastha brand, with its place of business at Av. Cidade de Córdova 6, Alfragide, Portugal. Privacy contact: [email protected].

2. What we collect and why

• Contacts and bookings (name, phone, email, messages): to reply, book consultations, sessions and retreats, and arrange gift vouchers. Legal basis: pre-contractual steps and performance of a contract.
• Health data (pre-consultation form, test results, medication, supplements): only for your assessment and follow-up. Legal basis: your explicit consent (GDPR art. 9(2)(a)), which you may withdraw at any time.
• Waiting list (name, phone, interest): to tell you about new dates by WhatsApp. Legal basis: consent. You can leave at any time.
• Browsing data: site usage statistics, only if you accept analytics cookies.
• Invoicing: data required by law to issue invoices. Legal basis: legal obligation.

3. How long we keep it

Contact and follow-up data are kept while we have a relationship with you and up to 5 years after the last contact; invoicing data for 10 years, as required by tax law; waiting-list data until you ask to leave.

4. Who we share it with

We never sell or hand over your data. We use providers who process it on our behalf, with appropriate safeguards: website hosting and email (Cloudflare), messaging (WhatsApp/Meta), analytics (Google Analytics and Microsoft Clarity, only with consent) and, where applicable, our follow-up platform hosted in the European Union. Some providers may transfer data outside the EU under standard contractual clauses or the EU-US Data Privacy Framework.

5. Cookies

We only use what is essential for the site to work and, if you accept, analytics cookies (Google Analytics 4 and Microsoft Clarity) to understand which pages are visited and improve the experience. Cloudflare Web Analytics measures visits without cookies. You can change your choice at any time in Cookie preferences.

6. Your rights

You may request access, rectification, erasure, restriction and portability of your data, object to processing and withdraw consent by writing to [email protected]. You may also lodge a complaint with the Portuguese data protection authority, CNPD (www.cnpd.pt).

7. Security

Health data are stored with access restricted to the therapists and treated confidentially.