Privacy Policy

Section 1

Introduction

This Privacy Policy applies to the personal data collected by Psingular, Lda. through the website psingular.pt, the forms made available, telephone contact and the provision of clinical, training and organisational intervention services.

By using our website or contacting us, the user declares that they are aware of and accept the terms of this policy. We recommend that you read it carefully.

Section 2

Data Controller

The controller of your personal data is:

Section 3

Personal data we collect

We collect only the data strictly necessary for the purpose for which they are intended. Depending on how you interact with us, we may collect:

Section 4

Purposes of processing

We process your personal data for the following purposes:

1. Responding to contact requests and requests for information sent through the website
2. Scheduling, managing and providing consultations and clinical services
3. Psychological assessment and preparation of clinical reports when requested
4. Invoicing and compliance with legal, tax and accounting obligations
5. Sending the newsletter and editorial communications (with prior consent)
6. Management of the Psingular Members' Area, where applicable
7. Improving the website, the user experience and our communication
8. Compliance with professional ethical obligations towards the Ordem dos Psicólogos Portugueses (Order of Portuguese Psychologists)

Section 5

Legal basis for processing

The processing of your data is based on one of the following legal bases provided for in the GDPR:

• Consent — for sending the newsletter, marketing and processing health data
• Performance of a contract — for the provision of clinical and training services
• Legal obligation — for invoicing, accounting and professional ethical duties
• Legitimate interests — for website security, fraud prevention and service improvement

Section 6

Retention period

Your data are kept only for as long as necessary for the purposes for which they were collected:

• Contact requests not followed up: 12 months
• Clinical data: 5 years after the end of clinical care, in accordance with the guidelines of the Ordem dos Psicólogos Portugueses
• Invoicing and accounting: 10 years, under Portuguese tax legislation
• Newsletter: until the subscription is cancelled
• Cookies: in accordance with the specific policy (see Cookie Policy)

Section 7

Sharing with third parties

Psingular does not sell, rent or share your personal data with third parties for commercial purposes. In specific situations, and always with appropriate safeguards, we may share data with:

• Technical processors — hosting providers (Hetzner, Germany), email, payment management and clinical management tools, all subject to GDPR data processing agreements
• Health professionals — only with the client's express consent, in situations of clinical liaison
• Competent authorities — when required by law, in strict compliance with legal obligations
• Minho Form, Lda. — an entity of the same group, exclusively for the administrative management of enrolments in certified training, subject to consent

All processors are located in the European Union or in countries covered by an adequacy decision of the European Commission.

Section 8

Your rights

Under the GDPR, you have the following rights over your personal data, which you may exercise at any time:

• Right of access — to know what data we hold about you
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request the deletion of your data
• Right to restriction — to restrict processing in specific circumstances
• Right to data portability — to receive your data in a structured format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing
• Right to lodge a complaint — with the Comissão Nacional de Protecção de Dados (CNPD — Portuguese National Data Protection Commission)

To exercise any of these rights, contact us by email at dpo@psingular.pt. We will respond within a maximum of 30 days.

Section 9

Data security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, destruction or disclosure:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Servers located in the European Union (Hetzner, Germany — in compliance with the GDPR)
• Access restricted by hierarchical levels and strong authentication
• Regular, protected backups
• Ongoing staff training in data protection
• Enhanced confidentiality for clinical data, which are subject to professional secrecy

Section 10

Changes to the policy

This policy may be updated periodically to reflect legal, organisational or technological changes. Any change will be published on this page, with the date of the last update indicated.

We recommend that you consult this policy regularly. In the event of substantial changes, we will notify registered users by email.

Section 11

Contact for the Data Protection Officer

For any question concerning the processing of your personal data, the exercise of your rights or clarification of this policy, contact our Data Protection Officer (DPO):

You may also lodge a complaint with the competent supervisory authority: