Legal
Privacy policy
Last updated: 12 October 2026
1. Who is responsible
The controller of your personal data is:
- Helena Santos
- Email for privacy requests: privacy@portuguesewithhelena.com
"We" in this policy means the controller above. The website is Portuguese with Helena, for private one-to-one European Portuguese lessons.
2. What data we use, why, and on what legal basis
Free grammar PDF
- Data: your email address and the date you agreed.
- Purpose: to send you the PDF and a weekly email.
- Legal basis: your consent (Article 6(1)(a) GDPR). You give it by ticking the box.
- How long: until you unsubscribe or withdraw your consent. Every email has an unsubscribe link.
Contact form
- Data: your name, email address and the message you write.
- Purpose: to read and answer your message.
- Legal basis: your consent (Article 6(1)(a)). For questions about lessons, also steps before a contract at your request (Article 6(1)(b)).
- How long: 24 months after the last message.
Lessons and payments
- Data: your name, email address, the lessons you bought and the payment record. Card details go to Stripe. We never see them.
- Purpose: to deliver your lessons and keep accounts.
- Legal basis: performing our contract with you (Article 6(1)(b)) and legal duties such as tax records (Article 6(1)(c)).
- How long: as long as the law requires for accounting records: 24 months.
Booking a free lesson
- When booking is switched on, you choose a time with an online booking service. It receives your name, email address and time zone so we can meet.
- Legal basis: steps before a contract at your request (Article 6(1)(b)).
Technical data
- Our hosting provider processes technical data such as your IP address when you visit, to deliver the site and keep it secure.
- Legal basis: our legitimate interest in a secure and working website (Article 6(1)(f)).
3. Cookies
This website does not set cookies for tracking or advertising. It loads no analytics and no third-party scripts. If this changes, we will update this page and ask for your consent first.
4. Who receives your data
We use these service providers to run the website. They process data on our behalf:
- Cloudflare: hosting, and delivery of messages from the contact form.
- MailerLite: sends the PDF email and weekly emails.
- Stripe: processes payments. It also acts under its own privacy policy.
- Booking service: [name, when switched on].
We do not sell your data. Links to YouTube, Instagram and TikTok take you to other sites. Their own privacy policies apply there.
5. Transfers outside the EU
Some providers may process data outside the European Economic Area. Where this happens, the transfer must be covered by a safeguard required by the GDPR, for example standard contractual clauses or an adequacy decision.
6. Your rights
Under the GDPR you have the right to:
- access your data and get a copy;
- correct data that is wrong;
- have your data erased;
- restrict how we use it;
- receive it in a portable format;
- object to processing based on legitimate interest;
- withdraw your consent at any time. This does not affect what we did before.
To use a right, write to the privacy email in section 1. We answer within one month.
You can also complain to your data protection authority. In Portugal this is the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.
7. Changes
We may update this policy. The date at the top shows the latest version.