Privacy Policy

Last updated: March 2026

This Privacy Policy explains how Sofia Nunes ("I", "me", "my") collects, uses, and protects your personal data when you visit sofianunes.com or use my services. I am committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

1. Who I Am

Data Controller: Sofia Nunes

Contact: sofia@sofianunes.com

2. What Data I Collect

I may collect the following personal data:

  • Contact information (name, email address) when you submit an enquiry or book a call

  • Scheduling data when you book an introductory call via Calendly (name, email, timezone, and any notes you provide)

  • Usage data and analytics about how visitors interact with this website (via Squarespace's built-in analytics)

  • Technical data such as IP address, browser type, and device information collected automatically by Squarespace

3. How I Use Your Data

I use your personal data to:

  • Respond to your enquiries and communicate with you about my services

  • Schedule and manage introductory calls and sessions

  • Improve the website and understand how visitors use it

  • Comply with legal obligations

4. Legal Basis for Processing (GDPR)

I process your personal data on the following legal bases:

  • Legitimate interests — to respond to enquiries and manage bookings

  • Contractual necessity — to deliver services you have requested

  • Legal obligation — where required by applicable law

  • Consent — where you have explicitly agreed to a specific use (e.g. receiving communications from me)

5. Third-Party Services

I use the following third-party services that may process your data:

These providers act as data processors on my behalf and are bound by their own privacy policies and GDPR-compliant data processing agreements.

6. Data Retention

I retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Enquiry and contact data is typically retained for up to 2 years unless an ongoing relationship exists.

7. International Transfers

Calendly and Squarespace may process data outside the European Economic Area (EEA). Both providers have appropriate safeguards in place, including Standard Contractual Clauses, to ensure your data is protected in accordance with GDPR requirements.

8. Your Rights

Under GDPR and other applicable laws, you have the right to:

  • Access the personal data I hold about you

  • Request correction of inaccurate data

  • Request deletion of your data ('right to be forgotten')

  • Object to or restrict processing

  • Data portability

  • Withdraw consent at any time (where processing is based on consent)

  • Lodge a complaint with your local data protection authority

To exercise any of these rights, please contact me at sofia@sofianunes.com.

9. Cookies

This website uses cookies. Please refer to my Cookie Policy for full details.

10. Changes to This Policy

I may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. I encourage you to review this policy periodically.

11. Contact

If you have any questions about this Privacy Policy, please contact me at sofia@sofianunes.com