Rooted in Self, Blooming in Life

-

Privacy Policy

Last Update: 01/12/2025

Welcome to the website saraperaltadacruzpsi.com. Protecting your privacy and personal data is a priority. This Privacy Policy explains which data we collect, for what purposes, how it is processed, your rights as a data subject, and how we ensure compliance with the General Data Protection Regulation (GDPR).


1. Data Controller

The data controller is:
Sara Peralta da Cruz / Clinical and Health Psychologist
Professional address: Online Clinic Orquiedessence
Contact: geral@saraperaltadacruzpsi.com


2. Scope of Application

This Policy applies to the processing of personal data collected through the website saraperaltadacruzpsi.com, including when you use contact forms, request information, schedule appointments, or communicate through the channels provided on the site.


3. Personal Data We Collect

We may collect and process the following types of personal data:

a) Contact data: name, email, and phone number when you contact us.
b) Data for scheduling and providing of psychological services: name, date of birth, contact information, and any clinical or personal information you voluntarily provide.
c) Administrative data: data required for invoicing (name, address, tax ID) and payment records.

We collect only the data strictly necessary for each purpose.


4. Purpose of Processing and Legal Basis

We process your personal data for the following purposes:

  • Responding to contact or information requests — legal basis: consent or legitimate interest, as applicable;
  • Scheduling and providing psychological services, including clinical records when applicable — legal basis: contract execution;
  • Compliance with legal and tax obligations — legal basis: legal obligation;
  • Administrative and communication management related to the services provided.

5. Sharing Data with Third Parties

Your data is not shared with third parties, except in the following situations:

  • When required to comply with legal or tax obligations;
  • When disclosure is legally required to competent authorities;
  • When processing requires external services (e.g., accounting), always ensuring confidentiality and GDPR-compliant subcontracting agreements.

Your data will never be sold, transferred, or used for purposes other than those described in this Policy.


6. Retention Periods

Data will be retained only for the period necessary to fulfill the described purposes:

  • Contact/information requests: deleted when no longer necessary or upon request;
  • Clinical and administrative data: retained for the legally required period for clinical practice and tax obligations;
  • Invoicing data: retained in accordance with current tax legislation.

7. Your Rights

As a data subject, you have the following rights:

  • Right to access your data;
  • Right to rectify inaccurate data;
  • Right to erasure (“right to be forgotten”), when applicable;
  • Right to restrict processing;
  • Right to object to processing;
  • Right to data portability, when applicable;
  • Right to withdraw consent without affecting the lawfulness of prior processing;
  • Right to lodge a complaint with the CNPD — National Data Protection Commission..

To exercise any of these rights, you may contact us using the information provided in Section 1.


8. Security and Confidentiality

We adopt appropriate technical and organisational measures to ensure the security of your data, preventing unauthorised access, loss, alteration, or improper disclosure.
Only the data controller and authorised personnel, when necessary, have access to the data.


9. Cookies and Similar Technologies

The website may use cookies to improve your browsing experience. You can configure your browser to block or delete cookies; however, some website functionalities may be limited.

No cookies are used to collect personal information without your explicit consent.


10. Changes to This Policy

We may update this Privacy Policy whenever necessary. The latest version will always be available on the website, with the update date indicated.


11. Contact

For questions or requests related to the processing of your personal data:

Email: geral@saraperaltadacruzpsi.com