Privacy Policy

Last updated: 25/02/2026
Policy version: 2026-02-25

This Privacy Policy explains how Psibilitar processes personal data in the context of this website, including contact and appointment requests submitted via forms.

1. Controller (who we are)

Entity: Psibilitar - Serviços de Psicologia, Lda.
Tax ID: 515489050
Address: Rua Cano dos Amores, Lote 9, Loja 4, 3040-244 Coimbra, Portugal
Email: geral@psibilitar.pt
Phone: +351 932 452 712

2. What data we collect

We process only the data required to handle your request. Typically, we collect:

Identification and contact data: name, email, phone (and company, if provided).
Request content: message / brief reason and preferred time options (when applicable).
Minimal technical metadata to prevent abuse and support the service: user-agent, browser language and referer (we do not collect IP by default via the form).
Sensitive data: we do not ask for health data in the form. Please avoid including detailed clinical information. If you provide it, it will be handled confidentially and only to respond/manage your request.

3. Purposes and legal basis

Handling contact and appointment requests and replying to you (pre-contractual steps / measures requested by the data subject).
Operational management of the request (confirmations, rescheduling and related communications).
Compliance with legal obligations, where applicable.
Security, fraud/abuse prevention and service maintenance (legitimate interests).
Marketing emails only if you explicitly opt in (consent, optional).

4. Recipients and processors

We may share personal data only when necessary and with providers acting as processors, namely:

Google/Firebase (hosting and lead database), under data processing terms.
AWS SES (transactional email delivery), when applicable.
Strictly necessary IT/support providers for operations and security.
Authorized Psibilitar staff who need access to handle your request.
Public authorities, when required by law.

5. International transfers

We aim to keep processing within the European Economic Area (EEA). When transfers outside the EEA occur for technical reasons (e.g., technology providers), appropriate safeguards are used (e.g., Standard Contractual Clauses and supplementary measures).

6. Retention

We retain data only for as long as needed for the purposes described. As a rule, website requests/leads are retained for up to 12 months after the last interaction, unless they become clients/patients (moving to the applicable clinical/admin systems) or a longer legal retention period applies.

7. Your rights

Under applicable law, you may exercise: access, rectification, erasure, restriction, portability, objection and (where processing is based on consent) withdraw consent.

To exercise your rights, contact us at: geral@psibilitar.pt

8. Complaints

If you believe your data is being processed unlawfully, you may lodge a complaint with the Portuguese Data Protection Authority (CNPD).

9. Security

We implement appropriate technical and organizational measures (access controls, audit logging and encryption in transit). Access is limited to what is strictly necessary.

10. Changes

We may update this Privacy Policy when needed. We will publish the updated version on this page.

For cookies, please see the Cookie Policy.