Privacy, simply.

Last updated: 2 November 2026

1. Who is responsible for your information?

Olga Santos, an independent Portuguese teacher based in Porto, Portugal, is responsible for the personal information submitted through this website. For privacy questions or requests, contact olga@olgasantos.pt.

2. What information do we collect?

When you send an enquiry, the form asks for your country of origin, name, email address, the number of adults and minors interested in classes, the service selected, the package selected if relevant, and your message. A phone number is optional. If you later arrange lessons, further information may be requested directly where necessary to provide the service.

Only the number of minors is requested. Please do not include children's names, identification documents, health details, or other sensitive personal information in your message.

When you visit the website, basic technical information, such as IP address, browser and request information, may be processed by the website host or its security services. The enquiry form server also uses limited, temporary request information to reduce automated abuse.

3. Why do we use your information, and what is the legal basis?

We use your enquiry information to read your request, reply to you, discuss online classes and packages, and take steps you request before entering into a teaching arrangement. This processing is generally necessary for pre-contractual steps at your request under Article 6(1)(b) of the General Data Protection Regulation (GDPR).

Where an enquiry is a general question rather than a request to arrange lessons, correspondence may be handled on the basis of our legitimate interest in replying to people who contact us, under Article 6(1)(f) GDPR, balanced against your rights. Limited technical data may be used on the same basis to protect the website, prevent spam and investigate abuse.

If you become a student, information necessary to organise and provide the agreed lessons may be processed to perform the contract (Article 6(1)(b)). Information required for invoicing, accounting or other legal duties is handled under Article 6(1)(c).

We do not use contact-form enquiries to subscribe you to marketing emails and we do not sell your personal information.

4. Which details are required?

Fields marked with an asterisk are needed to understand and answer your enquiry. A phone number is optional. Supplying this information is not a statutory obligation; however, without the necessary contact details and enquiry information we may be unable to respond or propose suitable classes.

5. Who can access the information?

Your enquiry is sent to Olga through the site's email system. Website hosting, technical support and email providers may process information strictly to operate these services. The email account is managed through the provider currently used for olga@olgasantos.pt (PTisp). The website hosting provider may change when the site is published, and this notice should be updated if the arrangements change.

Information may also be disclosed where required by law or to establish, exercise or defend legal claims. We do not publish enquiry messages.

6. How long do we keep information?

For enquiries that do not lead to lessons, our retention policy is to delete the related correspondence within 12 months of the last exchange, unless it is still needed to deal with a request or to establish, exercise or defend a legal claim. If lessons are arranged, relevant records may be kept for the duration of the student relationship and, where necessary, for applicable legal or accounting retention periods. Temporary anti-spam request records used by the local contact-form server expire after approximately 10 minutes.

Messages may remain in routine email or hosting backups for a limited additional period under the relevant provider's backup arrangements. Access and deletion requests will be assessed against legal obligations and available technical controls.

7. Third-party services and international data transfers

Some website content is loaded from third-party services. Google Fonts supplies typography, and the homepage may load a Porto photograph from Wikimedia Commons. Loading those resources can disclose your IP address and browser information to the providers. Their handling of data is governed by their own privacy notices.

If you choose to use the WhatsApp contact button, you are redirected to WhatsApp, which processes information under its own privacy policy. Sending an email or selecting a third-party link may likewise involve your email or communications provider.

Some providers may process information outside the European Economic Area. Where Olga is responsible for arranging an international transfer of personal data, the transfer must have a lawful GDPR mechanism, such as an adequacy decision or appropriate safeguards. You may contact us for information about applicable arrangements.

8. Cookies and analytics

The current website does not intentionally set analytics or advertising cookies in its own code. It uses no account login or advertising-tracking functionality. Third-party content or external sites opened from this website may have their own cookies or similar technologies. The floating cookie notice also uses a small local-storage preference on your device to remember that you have acknowledged it. This preference does not identify you and is not used for advertising or analytics. You can clear it using your browser's site-data settings, after which the notice may appear again. If optional analytics, marketing or other non-essential cookies are introduced, this notice and the site's consent controls must be updated before those technologies are enabled.

9. Your rights under the GDPR

Subject to the conditions and exceptions in applicable law, you may ask for access to your personal information, correction of inaccurate information, erasure, restriction of processing, or portability where applicable. You may also object to processing based on legitimate interests. Where processing relies on consent, consent can be withdrawn without affecting earlier lawful processing.

To exercise a right or ask a question, email olga@olgasantos.pt. We may need to verify your identity before responding and will normally respond within one month, subject to any lawful extension.

You have the right to lodge a complaint with Portugal's data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), via cnpd.pt. You may also contact your local data-protection supervisory authority where applicable.

10. Security and automated decisions

We take reasonable steps to protect enquiry information, including restricting access to the mailbox and applying safeguards to the contact-form endpoint. No internet service can guarantee absolute security. Do not send passwords, identity-document numbers, or sensitive personal information through the enquiry form.

The website does not use automated decisions that produce legal or similarly significant effects on visitors, and it does not profile enquiry senders to determine eligibility for classes.

11. Changes to this notice

This notice may be updated when the website, service providers or data practices change. The revision date will appear at the top of this page. Material changes will be communicated where required by applicable law.