Legal information
Privacy Policy
This policy explains what personal data may be processed, why it is processed, and your rights under the GDPR.
Last updated: July 19, 2026
Data controller
The data controller is Claudia Filipa Rodrigues da Conceição, trading as Claudia Rodrigues under the Cláudia Araújo brand, VAT number LU36710670, with an address at 79 Route d'Esch, L-4450, Belvaux, Luxembourg.
For privacy questions or to exercise your rights, email contato@claudiamentora.com.
Data we may process
Depending on how you use the website and services, we may process:
- identification and contact data, such as your name, email address, and telephone number;
- booking data, such as the selected service, date, time, time zone, and notes provided;
- payment and billing data communicated by payment providers, without access to full card details;
- messages and other information you choose to share by email, through Google Meet, or during sessions;
- basic technical data, such as IP address, security logs, language, and device information.
Purposes and legal bases
Data may be used to:
- manage bookings, deliver services, and process payments on the basis of contract performance;
- respond to requests and maintain necessary communication before and after sessions;
- comply with tax, accounting, legal, and fraud-prevention obligations;
- protect the security and operation of the website on the basis of legitimate interests;
- send optional communications only where consent or another valid legal basis exists.
Providers and recipients
To operate the website and deliver services, Google Workspace — including Google Calendar, Google Meet, and Gmail — may be used for bookings, sessions, and email; Stripe for payments; Vercel for hosting; and, where applicable, Supabase and Resend for technical database and email functions.
These providers process data under their own terms and data-protection commitments. Data may also be disclosed to authorities or advisers where required by law.
International transfers
Some providers may process data outside the European Economic Area. Under each provider’s data-protection terms, those transfers may rely on an adequacy decision — including the EU–US Data Privacy Framework where applicable — or standard contractual clauses. You may request further information using the contact in this policy.
Retention
Data is kept only for as long as necessary for the purposes described, to manage the contractual relationship, and to meet legal obligations. Retention periods may vary according to the type of data and tax, accounting, or legal-claims requirements.
Security
Reasonable technical and organisational measures are used to protect data against unauthorised access, loss, alteration, or disclosure. No online system is entirely risk-free.
Your rights
Under the GDPR and subject to the applicable legal conditions, you may request:
To exercise a right, contact contato@claudiamentora.com. You may be asked to confirm your identity. You may also lodge a complaint with Luxembourg’s Commission nationale pour la protection des données (CNPD).
- access to your personal data;
- correction of inaccurate or incomplete data;
- erasure or restriction of processing;
- objection to certain processing;
- data portability;
- withdrawal of consent without affecting earlier processing.
External services and links
The website contains links to third-party services. Use of those services is governed by the relevant provider’s policies, which you should review before providing data.
Changes to this policy
This policy may be updated when the services, providers, or applicable rules change. The date of the latest version is shown at the beginning of the page.