Privacy Policy

filipaosorio.com

1. Who is responsible for processing your data

The controller responsible for processing personal data collected through this website and the services described on it is Filipa Osório, based in Porto, Portugal. If you have any questions about this policy or your data, you can contact me at mail@filipaosorio.com.

2. Which services this policy applies to

This policy applies to data collected through filipaosorio.com and in connection with the services presented here, namely CEEN · Clarity, Strategy and Energy in Business and Intuitive Reading, as well as gatherings with communities and companies. The CEEN Terms and Conditions also apply to CEEN.

3. What data I collect

Depending on how you interact with me, I may collect:

• Contact and booking data: your name, email address, telephone or WhatsApp number, and the information you share when booking a session.
• Data shared in connection with sessions: everything you tell me before, during and after the sessions, including in the digital space for observation and sharing, where applicable.
• Payment data: I do not directly store your card or bank account details. Payments are processed through Stripe or made by bank transfer, MB Way or Revolut, depending on the service.
• Browsing data: through Google Analytics, only if you accept that category of cookies (see section 7).
• For the Intuitive Reading specifically: if you choose to share them, your date of birth and other information relevant to preparing the reading.
• For gatherings with communities and companies: the name, email address, telephone number and organization of the person arranging the gathering, together with the information needed to prepare it. I do not collect personal data from participants unless they choose to contact me directly or provide feedback.

4. Why I process this data and the legal basis

Purpose	Legal basis
Providing the contracted service (sessions, readings and support)	Performance of a contract (Article 6(1)(b) GDPR)
Issuing invoices and complying with tax obligations	Legal obligation (Article 6(1)(c) GDPR)
Website usage statistics (Google Analytics)	Consent (Article 6(1)(a) GDPR)
Booking calendar embedded on the website (Calendly)	Consent (Article 6(1)(a) GDPR)
Responding to messages and contact requests	Legitimate interest in communicating with you (Article 6(1)(f) GDPR)
Use of testimonials and feedback (section 9)	Legitimate interest (Article 6(1)(f) GDPR) for anonymous testimonials; consent (Article 6(1)(a) GDPR) for testimonials with your name, voice or image

5. Who I share your data with

I do not sell or share your data for third-party marketing purposes. To operate the website and provide the services, I use the following providers, which process data on my behalf or as part of their own services:

• Calendly — booking and calendar management.
• Stripe — payment processing.
• Notion — organizing and sharing personalized workspaces, such as CEEN Session summaries and CEEN Cycle proposals.
• Google Analytics — website visitor statistics, only with consent.
• WhatsApp (Meta) — direct communication with you, including sending proof of payment when booking CEEN, and in other situations where you choose this channel. I retain the history of these conversations as part of the record of our work together, for the same periods set out in section 8.

Each of these providers has its own privacy policy governing how it processes data within its systems.

6. International transfers

Some of the providers listed above, particularly Google, Stripe, Calendly, Notion and Meta/WhatsApp, are based or process data outside the European Economic Area, notably in the United States. In these cases, transfers rely on the safeguards provided for under the GDPR, such as the Standard Contractual Clauses approved by the European Commission, as implemented by each provider.

7. Cookies

The website uses cookies. When you first visit filipaosorio.com, you are shown a banner where you can choose to accept, reject or manage your preferences in detail by category:

• Necessary — always active; these enable the website’s basic functionality and do not store identifiers.
• Statistics (Google Analytics) — activated only if you give permission.
• Booking calendar (Calendly) — loads only if you give permission, together with the cookies associated with it.

Your choice is stored in your own browser for 180 days, after which the banner appears again. You can change your choice at any time here: the cookie banner will reopen so you can select your preferences again.

8. How long I retain your data

• Invoicing documents: 10 years, as required by law under the Portuguese Commercial Code and VAT Code.
• Data relating to the services provided: retained for up to three years after completion of the service or the end of our work together, unless you request deletion earlier or purchase another service, in which case the retention period is reassessed from that point.
• Browsing data (Google Analytics): according to the tool’s settings.

9. Testimonials and feedback

I may share comments or messages you send me as testimonials anonymously, without your name or voice and without details that could identify you, on the website or in other promotional materials. To use your name, voice (audio) or image, I always ask for your specific consent, separately from the purchase of any service, stating the content and the channels where it will be published.

You may decline without any consequence, object to anonymous use and withdraw consent at any time by emailing mail@filipaosorio.com. The content will then no longer be used in new materials and will be removed from the website.

10. Your rights

Under the GDPR, you have the right to:

• access the data I hold about you;
• request the correction of inaccurate or incomplete data;
• request the deletion of your data, where applicable;
• request the restriction of processing in certain circumstances;
• object to processing based on legitimate interests;
• request the portability of the data you have provided to me;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados — CNPD) at www.cnpd.pt.

To exercise any of these rights, contact me at mail@filipaosorio.com.

11. Security

I take reasonable technical and organizational measures to protect your data against unauthorized access, loss or alteration. However, no system is completely secure, and I cannot guarantee absolute security.

12. Changes to this policy

This policy may be updated periodically. The version in effect is always the one published on this page, with the date of the last update shown in the footer.

---