Mon – Sun 10:00 – 20:00 (+351) 933 70 10 10

Privacy Policy

1. General Information and Contacts (Data Controller)

1.1. The entity responsible for processing your personal data is Kurinta, Lda (hereinafter referred to by its commercial brand WeDo Massage), corporate entity number PT516998420, with registered offices at Rua Santa Catarina, 356 1º, 4000-443 Porto, Portugal.

1.2. If you have any questions regarding how we process your data, you may contact us via the company’s official email or by telephone at +351 933 70 10 10.

2. Personal Data We Collect and Purposes

We collect only the personal data strictly necessary to provide the contracted services. Data is managed according to the following purposes:

2.1. Booking and Appointment Management

  • Data collected: Name, email address, and telephone number.
  • Processing method: Data is submitted by the user through our online booking platform integrated into the website.
  • Purpose and Legal Basis: Performance of a contract or pre-contractual measures (Article 6(1)(b) of the GDPR). This data is indispensable to validate, manage, and secure your scheduled time slot.

2.2. Service Communications and Reminders (Non-Marketing)

  • Data collected: Telephone number and email address.
  • Purpose: Exclusive delivery of booking confirmations, schedule updates, and operational reminders via digital channels (SMS, instant messaging applications, or email).
  • Privacy Commitment: WeDo Massage does not conduct direct marketing campaigns, nor do we send newsletters, promotional communications, or birthday offers. Your contact details are used solely for the operational management of your booking.

2.3. Payment Processing and Invoicing

  • Data collected: Payment data (for digital transactions), Name, Tax ID (NIF), and Address (for legal invoice issuance).
  • Processing method: Online transactions are processed securely through integrated and certified payment gateways in full compliance with PCI-DSS standards. WeDo Massage does not store or have direct access to clients’ banking or card details. In-person payments are made in cash or via an Automated Payment Terminal (TPA).
  • Purpose and Legal Basis: Compliance with contractual and legal obligations (Article 6(1)(c) of the GDPR).

2.4. Health Data and Medical Conditions (Sensitive Data)

  • Data collected: Information regarding physical contraindications, injuries, recent surgeries, allergies, or pregnancy status.
  • Collection method: This information is gathered in a strictly confidential and verbal manner by the therapist prior to the session, or through assisted entry into a digital format at the service location.
  • Purpose and Legal Basis: Explicit consent of the data subject (Article 9(2)(a) of the GDPR). This data is used exclusively to guarantee the client’s physical safety during the treatment by adapting the techniques used. It is not shared with third parties under any circumstances.

3. Data Retention Period

3.1. Data required for invoice issuance is integrated directly into our certified billing software, where it remains archived for the legally mandated period of 10 years, in strict compliance with current fiscal obligations in Portugal.

3.2. Contact data entered into the online booking system is stored on the platform for as long as the client keeps their profile active for appointments, and will be permanently deleted whenever requested by the user.

3.3. Medical information shared verbally is not recorded in permanent databases. Whenever digital anamnesis forms are collected, they will be encrypted and stored only for the period necessary to ensure the continuity and safety of the client’s treatments.

4. Sharing Data with Third Parties

WeDo Massage does not commercialize, lease, or share personal data with external entities for advertising purposes. Data transfers occur exclusively with the service providers necessary to ensure the center’s core operations:

  • Web infrastructure providers and online reservation management systems.
  • Banking institutions and financial intermediaries for electronic payments.
  • The Portuguese Tax and Customs Authority (AT), via automatic communication from the legal billing software.

5. Your Rights (Data Subject Rights)

Under the GDPR and applicable national legislation (Law No. 58/2019), clients may exercise the following rights at any time by submitting a written request to our official contact channels:

  • Right of Access: To confirm what data is being processed and request a copy of it.
  • Right to Rectification: To update or correct inaccurate information.
  • Right to Erasure (“Right to be Forgotten”): To request the deletion of data from the booking system (excluding data retained by statutory obligation within the legal billing software).
  • Right to Restriction of Processing: To request a temporary suspension of data processing operations.

6. Supervisory Authority and Complaints

If you believe that the processing of your personal data violates European regulations, you hold the right to file a formal complaint with the competent supervisory authority in Portugal:

National Data Protection Commission (CNPD)
Av. D. Carlos I, 134 – 1.º, 1200-651 Lisbon, Portugal
Official website: www.cnpd.pt