Privacy Policy
Who handles your data
Data controller: Francielly Agostinho Costa da Silva — Dermopigmentação Avançada
Address: Av. Dr. António Palha 53, 4715-091 Braga, Portugal
NIF: 238641112
Email: geral@fiberbrow.eu
What data we collect, and why
When you ask for information through the contact form
We collect your name, your clinic's name if you give it, your country, your email, your phone number if you give it, the message you write, and the language you were viewing the website in.
We use this data to reply to you and for any sales follow-up that results. The legal basis is our legitimate interest in replying to people who contact us, and your consent when you ask to be told about future dates.
We also keep an irreversible version of your IP address, transformed by a process that makes it impossible to recover the original address or to know where you wrote from. It is used only to prevent the form from being sent repeatedly and automatically, and it is used in the same way when someone enrols in a course.
These records are deleted after 24 hours. The clean-up has no set time: it happens at scattered moments, as the form and the enrolment are used.
When you enrol in a training course
We collect your name, email and phone number, and we keep the record of the enrolment: the course, the package chosen, the amount, the payment status, the date and the language you enrolled in.
We do not receive or store your card details. Payment is processed by Stripe, which acts as a processor, and payment details never pass through our systems. From Stripe we only receive confirmation that the payment was made, the amount, and a transaction identifier.
When the training starts within fourteen days, we also keep the record of your declaration waiving the right of withdrawal, with the date and time. This is a legal obligation.
The legal basis is the performance of the contract and compliance with legal obligations, including tax obligations.
When you visit the website
We use Umami to count visits. Umami does not use cookies and does not track people across websites.
What is recorded, in aggregate: the page viewed, the country, the browser, the operating system, the type of device, the screen size, the browser language, and the page you came from, if you came from another website.
Umami requests go through our own domain, which means your browser does not talk directly to a third-party server for statistics.
Cookies
The website uses two cookies, both necessary for it to work and neither of them for advertising or tracking:
- the language you chose, so we do not suggest another one again;
- your choice about the background motion, so the website respects the button you pressed.
There is an area reserved for our team, which uses session cookies to keep the access open. Only those who enter that area receive them. A visitor to the website never does.
We do not use advertising, social media or profiling cookies. That is why we do not show you a window asking for consent: strictly necessary cookies do not require it.
More detail in the Cookie Policy.
Who we share it with
- Stripe (payments), based in Ireland.
- Resend (sending internal notices to our team).
- Supabase (database), hosted in the European Union.
- Vercel (website hosting).
Each of them has access only to what is needed for the service it provides. We do not sell your data or pass it on to third parties for marketing.
Transfers outside the European Union
Some of these providers may process data outside the European Economic Area. When that happens, it is under the standard contractual clauses approved by the European Commission or an adequacy decision.
How long we keep it
- Information requests: up to three years after the last contact.
- Enrolments and invoicing: ten years, as required by law.
- Record of the fourteen-day waiver: five years.
- Irreversible version of the IP address: 24 hours.
The website does not send you automatic emails. Replies to your information request are written by a person on our team. Proof of payment is handled by Stripe, under the terms of its service.
Your rights
You can ask for access to your data, its correction, its erasure, the restriction of processing and portability, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time, without affecting what was done before.
Write to geral@fiberbrow.eu. We reply within one month.
If you believe your data is not being handled as it should be, you can lodge a complaint with the Comissão Nacional de Proteção de Dados, the Portuguese data protection authority, at
https://www.cnpd.pt
Changes
This policy may be changed. The date below shows when it was last reviewed.
Last updated: 30 September 2026
In the event of any discrepancy between language versions, the Portuguese version prevails, as Portuguese law applies.