Privacy Policy

1. Data Controller

WellZen by Diana — Diana Ferreira
Av. 5 de Outubro 16, 2º Dto, 1050-057 Lisboa, Portugal
Email: wellzenbydiana@gmail.com
Phone: +351 910 275 596

2. What data we collect and why

2.1 Contact form

When you submit the contact form we collect your name, email address, phone number (optional) and your message. This data is used solely to respond to your enquiry and is never shared with third parties for commercial purposes.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) — responding to contact requests initiated by the user.

2.2 Bookings via Fresha

Session bookings are managed by Fresha (Fresha.com Ltd), an external data processor. When you make a booking, your personal data (name, email, phone) are subject to Fresha's privacy policy. WellZen by Diana only accesses the information necessary to manage your session.

2.3 Analytics and advertising (Google)

With your consent, we use:

• Google Analytics 4 (ID: G-0P7FX9D92E) — to understand how visitors use the site (pages visited, session duration, traffic source). Data is anonymised and aggregated.
• Google Ads (ID: AW-17912974188) — to measure the effectiveness of advertising campaigns.
• Google Tag Manager (ID: GTM-TC8PMXQV) — to manage the analytics and advertising tags listed above.

These tools are only activated after your explicit consent via the cookie banner. You may withdraw consent at any time by clicking "Manage cookies" in the footer.

Legal basis: consent (Art. 6(1)(a) GDPR).

2.4 WhatsApp

The WhatsApp buttons on this site redirect to the WhatsApp application (Meta Platforms Ireland Ltd). By clicking, you start a direct conversation with WellZen by Diana. Meta processes conversation data according to its own privacy policy. We do not collect or store data from this interaction beyond the conversation content.

2.5 Cookies and local storage

We use cookies and localStorage to:

• Store your cookie consent preference (first-party cookie, duration: 365 days).
• Google Analytics and Google Ads session cookies (when consented).

We do not use third-party tracking cookies without your consent.

3. Who we share your data with

Your personal data may be shared with the following sub-processors, solely for the purposes described:

• Fresha.com Ltd — booking and payment management
• Google LLC — analytics and advertising (with consent)
• Meta Platforms Ireland Ltd — WhatsApp (when initiated by the user)
• Email server — to send replies to contact form submissions

We do not sell, rent or transfer your data to third parties for marketing purposes.

4. How long we keep your data

• Contact form data: deleted after 12 months or when the request is closed, whichever comes first.
• Analytics data (Google Analytics): 14 months (GA4 default retention).
• Booking data (Fresha): in accordance with Fresha's retention policy.

5. Your rights

Under the GDPR, you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure ("right to be forgotten") — request deletion of your data.
• Restriction of processing — ask us to limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us by email: wellzenbydiana@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese supervisory authority: Comissão Nacional de Proteção de Dados (CNPD).

6. International data transfers

Google services (Analytics, Ads, Tag Manager) may involve the transfer of data to the United States of America. Google LLC is certified under the EU–US Data Privacy Framework, which ensures an adequate level of protection as confirmed by the European Commission's adequacy decision.

7. Security

This site uses HTTPS (TLS) for all communications. The contact form is protected against spam by a honeypot field. We do not store payment data — all payments are processed directly by Fresha.

8. Changes to this policy

We may update this policy from time to time. When we do, we will update the date at the top of this page. For material changes, we will notify registered Fresha users by email.

9. Contact

For any question relating to privacy or data protection:
wellzenbydiana@gmail.com · +351 910 275 596