Privacy Policy

1. Data controller

The controller of the personal data collected through this site is Priscila Arantes PA, with registered address at R. Vale de São Miguel, Lote 5, 3020-113 Coimbra, Portugal.

Care is provided at Galeria Avenida — Av. Sá da Bandeira, no. 33, Unit 108, 3000-351 Coimbra.

Contact: WhatsApp +351 938 594 367 and email atendimento@priarantes.com.

2. Personal data collected

We may collect the following data, depending on how you use the site and the services:

• full name;
• phone number;
• email address, when provided;
• the service requested, date, time and booking notes;
• data needed to create and use a client account, where applicable;
• basic technical information such as IP address, browser type, date and time of access;
• cookie preferences stored in the browser.

3. Purposes of processing

Personal data is processed for the following purposes:

• allow appointments to be booked, managed, changed and cancelled;
• identify the client and provide the requested service;
• send confirmations, reminders and communications about the booking;
• respond to requests sent by phone, email, WhatsApp or the contact form;
• maintain security, prevent abuse and keep the site working;
• comply with legal, tax, accounting or regulatory obligations, where applicable;
• improve the site experience, where consent has been given for optional cookies.

4. Legal bases

The processing of personal data may rely on the following legal bases:

• performance of a contract or pre-contractual steps, in order to respond to the booking request and provide the requested service;
• compliance with a legal obligation, where information must be kept for tax, accounting or regulatory purposes;
• legitimate interest, for site security, fraud prevention, administrative management and defence of legal claims;
• consent, where use depends on freely given, specific and informed authorisation, such as optional cookies or non-essential communications.

5. Data retention

Data is kept only for as long as needed to fulfil the purposes set out in this policy, unless there is a legal obligation to retain it for longer or a legitimate need to defend legal claims.

Booking and contact data may be kept for as long as needed to manage appointments, maintain operational history, comply with legal obligations and resolve any complaints.

6. Sharing data with third parties

Personal data is not sold. It may be processed by service providers strictly necessary for the operation of the site and the service, such as:

• hosting, infrastructure and technical maintenance services;
• email, messaging or client communication services;
• map and location tools, when you accept functional cookies;
• public authorities, where there is a legal obligation.

Where applicable, these third parties must process the data in accordance with instructions, appropriate security measures and the data protection legislation in force.

7. International transfers

Some technology providers may process information outside the European Economic Area. Where that happens, appropriate safeguards under the GDPR must be applied, such as adequacy decisions, standard contractual clauses or equivalent mechanisms.

8. Security

Appropriate technical and organisational measures are in place to protect personal data against unauthorised access, loss, alteration or improper disclosure. Even so, no internet-connected system can guarantee absolute security.

9. Data subject rights

Under the GDPR, the data subject may request:

• access to their personal data;
• rectification of inaccurate or incomplete data;
• erasure of the data, where legally applicable;
• restriction of processing;
• objection to processing based on legitimate interest;
• data portability, where applicable;
• withdrawal of consent, without affecting processing carried out before the withdrawal.

To exercise these rights, contact atendimento@priarantes.com. The data subject also has the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).

10. Health data and clinical records

As part of providing therapeutic pedicure care, a clinical record is kept, consisting of a medical history form and progress notes for each appointment. That record may include health history, allergies, regular medication, previous surgery and a description of the procedures performed.

Health data is a special category of data under Article 9 of the GDPR. It is processed in the context of providing health care, by a professional bound by a duty of confidentiality, and in compliance with the obligations applicable to the practice of therapeutic pedicure, in particular Portuguese Law no. 65/2014 of 28 August.

Access to the clinical record is limited to those who need it in order to provide care. Anyone performing only administrative duties, such as scheduling appointments, has no access to clinical information. Every change to the record is documented, identifying who made it and when.

Clinical records are kept for 3 year(s) after the last contact, after which they are securely deleted or anonymised, unless there is a legal or clinical basis for keeping them longer.

The booking notes field should only be used for information needed for the appointment. Detailed clinical information belongs in the clinical record, not in the notes field.

11. Minors

Bookings for minors must be made or authorised by a holder of parental responsibility or legal representative, where applicable.

12. Cookies

Este site utiliza cookies técnicos necessários ao funcionamento e pode utilizar cookies opcionais mediante consentimento. Para mais detalhes, consulte a Política de Cookies.

13. Changes to this policy

This Privacy Policy may be updated to reflect legal, technical or operational changes. The version published on this page is the one in force.