Privacy Policy
Last updated: August 2026
This text was adapted from the Associação Hélio Fumo policies and is pending legal review. Fields marked [TO BE DEFINED] must be completed before launch.
Hélio Fumo is committed to protecting the privacy and personal data of all users of this website, in compliance with the GDPR (Regulation (EU) 2016/679) and Portuguese Law no. 58/2019 of 8 August.
1. Data controller
Hélio Fumo, sole trader, tax number [TO BE DEFINED], with professional address at [TO BE DEFINED], Portugal. To exercise your rights or raise any data protection question, use the contact form available on the website.
2. What data we collect
We collect data you provide directly (name, email and message through the contact form; email for delivery of the free guide; billing and contact details when purchasing training plans) and, with your consent, anonymous browsing data for audience analytics. We do not knowingly collect data from children under 13.
3. Purposes and legal bases
We process your data to respond to enquiries (legitimate interest), to deliver the coaching services and training plans purchased (performance of a contract), to comply with legal and tax obligations, and to send the free guide, marketing communications and perform browsing analytics (consent). All processing has a legal basis under Art. 6 GDPR.
4. Data sharing
We do not sell or transfer personal data to third parties for commercial purposes. Data may be shared with technical service providers acting as GDPR-bound processors — namely web hosting, email delivery and payment processing [TO BE DEFINED: identify the payment processor, e.g. Stripe, and its policy] — and with competent authorities where legally required.
5. Data retention
Contact form data is kept for up to 1 year. Data relating to the purchase of plans and services is kept for 5 years after the end of the relationship (tax obligations). Analytics data for up to 26 months. Consent records for 3 years after withdrawal.
6. Security
We adopt appropriate technical and organizational measures: encrypted transmission (HTTPS/TLS), access control, secure authentication and bot protection. In the event of a data breach posing a risk to data subjects, we will notify the CNPD within 72 hours.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability, objection and withdrawal of consent, under Articles 15 to 22 GDPR. We respond within 30 days. You may also lodge a complaint with the Portuguese Data Protection Authority (CNPD) at www.cnpd.pt.
8. Cookies
For detailed information about the cookies used, see our Cookie Policy.
9. External links
This website may contain links to third-party websites, including the Associação Hélio Fumo website. We are not responsible for the privacy practices of those websites.
10. Changes to this policy
This policy may be updated to reflect legal, technological or operational changes. The last-updated date will always be revised.
11. Contact
For any question relating to your privacy, please use our contact form.