Privacy policy
Last updated: 16 September 2026
Northwind Physio, Lda. (“we”, “us”) is the data controller for the personal data you share with us through this website. This policy explains what we collect, why, for how long, and your rights under the General Data Protection Regulation (GDPR) and Portuguese Law 58/2019.
1. What we collect and why
- Appointment requests: your name, email address, phone number, the service you are interested in and any message you write. We use these to reply to you and arrange your appointment. Legal basis: your consent (Art. 6(1)(a) GDPR) and steps prior to entering into a contract (Art. 6(1)(b)).
- Technical data: our hosting provider records standard server logs (IP address, browser type, pages requested) for security and to keep the site running. Legal basis: legitimate interest (Art. 6(1)(f)).
This website does not use advertising trackers or third-party analytics cookies. Health information you choose to include in your message is treated as special-category data and is accessed only by clinical staff.
2. Who receives your data
Your form submission is delivered to us by our form-processing provider, which acts as a processor under a data-processing agreement, and is then stored in our clinic-management system hosted in the European Union. We never sell your data or share it for marketing.
3. How long we keep it
- Appointment requests that do not lead to a booking: deleted after 6 months.
- Clinical records of patients: kept for the period required by Portuguese health-records legislation.
4. Your rights
You may ask us at any time to access, correct, delete or export your data, to restrict or object to its processing, and to withdraw consent. Email privacy@northwindphysio.com or write to Rua Saraiva de Carvalho 118, 2.º Esq., 1350-300 Lisboa. You also have the right to lodge a complaint with the Portuguese supervisory authority, the CNPD (opens in a new tab).
5. Security
The site is served over HTTPS. Access to appointment requests is restricted to staff who need it, protected by individual accounts and two-factor authentication.
6. Changes
We will post any changes to this policy on this page and update the date above.