Ladata Porto
Privacy Policy
At Ladata Porto we use your personal data only to provide our services, look after your safety and keep in touch in useful ways. This policy explains what data we collect, why, who we share it with and what your rights are.
01Who we are
The controller of your data is Ladata Portugal, Lda, NIPC 518236870, registered at Rua de Tomaz Ribeiro, 550, 4450-298 Matosinhos, Portugal, which operates Ladata Porto. For any privacy question, contact us at info@bookladata.com.
This policy covers Ladata Porto only. Ladata Leiria is an independently run franchise with its own privacy policy.
02What data we collect
- Identity and contact: name, email, mobile number and, if you ask for an invoice with your tax number, your NIF and address.
- Bookings and purchases: sessions booked, cancelled or attended, packs, memberships, gift vouchers, discount codes and payments. Card details are handled by Stripe; we never see or store them.
- Health questionnaire: before your first visit we ask about health conditions, medication, allergies, pregnancy, and use of alcohol, tobacco or other substances.
- Communications: messages you send us by email or WhatsApp, and your communication preferences.
- Website use: data collected through cookies and similar technologies, such as pages visited and where the visit came from, only with your consent (see section 7).
03Why we use your data and on what legal basis
- Managing bookings, sessions, packs, memberships and vouchersPerformance of a contract
- Processing payments, issuing invoices and meeting tax obligationsPerformance of a contract and legal obligation
- Checking that our therapies are safe for you (health questionnaire)Explicit consent
- Sending booking reminders and notices about your pack or membershipPerformance of a contract
- Sending our newsletter and newsConsent, which you can withdraw at any time
- Measuring and improving our advertising (see section 5)Legitimate interest
- Website statistics and advertising cookiesConsent
- Security, fraud prevention and handling legal claimsLegitimate interest
04Health data
Your health questionnaire answers are used only to make sure our therapies (sauna, cold plunge, contrast therapy and the Recovery Room) are safe for you. Only the team running your sessions can see them. They are never used for marketing, never shared with advertising platforms and never appear in reports. You can withdraw your consent at any time, but without this information we may not be able to run some sessions safely.
05Advertising measurement
When you make a purchase, we may send Meta (Facebook and Instagram) and Google the value and type of purchase, together with your email, phone, name and country in encrypted (hashed) form. These platforms use this data only to check whether the purchase came from one of our ads and to show our ads to people more likely to be interested. We never share health data or the content of your messages.
We do this based on our legitimate interest in knowing which advertising works and not spending money on ads that don't. You can object at any time by writing to info@bookladata.com; from then on we stop sending your data.
06Who we share data with
We do not sell your data. We share it only with providers that help us operate, always under data processing agreements:
- Acuity Scheduling (Squarespace)Online booking
- StripePayments
- JotformHealth questionnaire
- SupabaseClient database (hosted in the EU)
- CloudflareHosting our internal tools
- Squarespace Email CampaignsSending the newsletter
- WhatsApp (Meta)Client communication
- Meta and GoogleAdvertising and statistics (see sections 5 and 7)
- Certified accountantTax obligations
We also share data with authorities when the law requires it.
Some of these providers are based in the United States. In those cases, transfers are protected by the EU-US Data Privacy Framework or by standard contractual clauses approved by the European Commission.
07Cookies
Our website uses cookies that are essential for it to work. Statistics cookies (Google Analytics) and advertising cookies (Meta Pixel) are only switched on if you accept them in the cookie notice. You can change your choice at any time under “Cookie preferences” at the bottom of every page.
08How long we keep data
- Client, booking and purchase data: while you are a client and for up to 5 years after your last visit.
- Invoices and payment records: 10 years, as required by tax law.
- Health questionnaire: while you are a client and for up to 2 years after your last visit, or until you withdraw consent.
- Newsletter: until you unsubscribe.
- Advertising send logs: 12 months.
09Your rights
You can, at any time, ask to access your data, correct it, delete it, restrict its use, receive it in a portable format, object to uses based on legitimate interest and withdraw any consent you gave. Just write to info@bookladata.com; we reply within one month.
If you believe your data is not being handled properly, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
10Minors
Our services are for people aged 16 or over. Clients aged 16 or 17 need written permission from a parent or legal guardian, including for the health questionnaire.
11Changes to this policy
We may update this policy. The date of the last update appears at the top, and we will let clients know about significant changes.