# Privacy policy

Liberdade 108 — IR3T Regenerative Therapies, Lda.
NIF/NIPC: 515 765 341

Updated 21 October 2026

Understand what information this website uses, why it is used and how to exercise your choices. This notice covers browsing and enquiries; clinical care has its own privacy information.

- No analytics or advertising trackers are installed in the website code.
- Unsubmitted planner and form details stay in page memory. Google Maps loads automatically as you approach the footer.
- For privacy requests: liberdade108@valdoleirosclinic.com.

## 1. Who is responsible

IR3T Regenerative Therapies, Lda., NIF/NIPC 515 765 341, operates Liberdade 108 by Valdoleiros Clinic and this website. Address: Avenida da Liberdade, 108, 6th floor, Lisbon, Portugal. Email: liberdade108@valdoleirosclinic.com.

This company is the controller for website enquiries. Use the email above or write to the clinic to ask about your personal data or this notice.

## 2. Browsing and website security

Hostinger provides hosting and content delivery. Serving a page can involve your IP address, request date and time, requested address, browser information and technical logs. These support delivery, troubleshooting and protection against abuse.

The legal basis for necessary website security and technical logs is our legitimate interest in running a reliable, secure website (GDPR Article 6(1)(f)). This does not authorise unrelated advertising or tracking. The website code does not install analytics or advertising trackers.

## 3. Enquiries and appointment requests

If you contact us, we use your contact details and message to respond. The assessment form asks for a name and email; phone number, preferred date and time, treatment interest, selected areas, concerns and a short message are optional. It also includes your preferred language and privacy acknowledgement.

Managing a request you make before booking a service is based on GDPR Article 6(1)(b). General correspondence may be handled on the basis of our legitimate interest in answering enquiries (Article 6(1)(f)); legal obligations, where applicable, rely on Article 6(1)(c). An enquiry does not subscribe you to marketing.

The form sends information only when online submission is available and you submit it. If the booking service is unavailable, the site explains this and does not send the form. Contact links open your email application only if you choose them. An appointment request is not a confirmed booking.

The website's server sends received requests to liberdade108@valdoleirosclinic.com using the clinic's Hostinger email service. Your email is used as the reply address so the clinic can respond. A separate automatic acknowledgement is sent to the address you enter, in the language of the page where you submit the form. The language preference in the form applies to later contact with the team. The acknowledgement contains only the request reference and general next steps, without repeating names, telephone numbers, treatment choices or notes. It does not verify ownership of that address or confirm an appointment. No marketing subscription is created.

Use contact details you control or are authorised to provide; do not submit another person's private information without permission. Acknowledgements use a fixed template and never repeat arbitrary form text. Hashed sender and recipient identifiers support sending limits to reduce unsolicited messages. These safeguards reduce abuse but cannot guarantee that every submission is authentic. The clinic should verify identity before sharing clinical information.

When direct calendar booking is enabled, choosing a practitioner and a day checks availability through Tugsis. Confirm booking sends your name, email, required telephone number, consultation type and selected time to Tugsis to register the appointment. Your guide selections and free-text notes are not copied into that booking. The website confirms a booking only after receiving and recording a successful calendar response. A separate reference email contains no clinical or contact details. The clinic manages calendar records separately from website enquiry records.

## 4. Optional notes and health information

You can request an assessment without selecting an area or describing a health concern. Please keep initial enquiries to contact and scheduling details. Do not use the message field for medical records, intimate details, photographs or sensitive medical history. Ask the team for a suitable channel instead.

Health data needs a separate basis under GDPR Article 9 as well as an Article 6 basis. A privacy acknowledgement is not consent to treatment or permission to use health information for any purpose. The clinical privacy notice must explain the grounds, recipients and retention applying to your care before health data is collected.

Selected areas, concerns, treatment interest and your note are sent only if you separately tick the optional sharing consent. These details may reveal health information. Their use to respond to this enquiry relies on your explicit consent (Articles 6(1)(a) and 9(2)(a)). Leaving the box unticked sends only contact and scheduling details. You may withdraw that consent through the clinic's email without affecting earlier lawful processing or your ability to request an assessment.

## 5. Planner, URLs and Google Maps

Before submission, planner selections and form fields are held in the current page's memory, not in local storage, session storage or cookies. Refreshing or closing the page clears unsubmitted details. A link from a treatment or technology page can include an interest identifier in the URL; the server can receive that address as part of a normal page request. Avoid sharing a personalised link if you want to keep that interest private.

The Google Maps map loads automatically as you approach the footer, without a load button. Loading it connects your browser to Google, which can receive your IP address and browser information and may use cookies under its own policies. Opening Get directions is a separate action that opens Google Maps. Browser settings can restrict third-party cookies or external content; the written address remains available.

## 6. Recipients and international transfers

Access to enquiries is limited to the clinic team and service providers who need it to deliver hosting, email, an enabled booking service or the clinic's private contact register. Once that register is connected, submitted contact and scheduling details, language preferences and delivery status are copied to a Google Sheets file restricted to authorised clinic users. Selected areas, concerns, treatment interest and notes are copied only with the form's separate sharing consent. The register supports answering and following up enquiries; it is not a public patient database. Information may also be disclosed where a legal obligation requires it. We do not sell enquiry information. External services you choose to visit operate under their own policies.

Some providers, including Google when its map loads, may process data outside the European Economic Area. A transfer requiring GDPR safeguards must rely on an applicable adequacy decision or another valid safeguard, such as standard contractual clauses. Contact us for the provider details and safeguards relevant to an enquiry; this notice does not claim that all processing stays in Portugal or the EU.

[Hostinger privacy policy](https://www.hostinger.com/legal/privacy-policy)

[Google privacy policy](https://policies.google.com/privacy)

## 7. How long information is kept

Unsubmitted form details are not retained by a booking server. Received enquiries are retained according to the time needed to answer and manage them, any resulting service relationship, applicable legal obligations and the establishment or defence of legal claims. Technical logs follow the hosting provider's operational retention arrangements. These are retention criteria, not a published fixed duration for every record.

You can ask us for the period or criteria applying to your information. Clinical records, billing documents and photography permissions are separate records with their own requirements; requesting deletion does not override a legal duty to retain them.

The request service keeps opaque references, keyed digests used to prevent duplicates, delivery state and timestamps. When the private contact register is enabled, it also keeps an encrypted copy of submitted answers temporarily so synchronisation can be retried. An hourly cleanup removes request metadata and encrypted copies once they are older than seven days, including copies awaiting synchronisation. Hashed rate-limit identifiers are removed once older than one day. The clinic's emails and any private register entries follow the enquiry retention criteria above; this technical cleanup does not delete mailbox messages or Google Sheets entries.

## 8. Your rights and how to use them

Depending on the processing and legal conditions, you can request access, correction, erasure, restriction or portability of your data, object to processing based on legitimate interests and withdraw consent where consent is the basis. Withdrawal does not affect earlier lawful processing. These rights are subject to applicable limits, including the rights of others and record-keeping obligations.

Write to liberdade108@valdoleirosclinic.com, describe your request and identify the enquiry or information concerned. We may request proportionate information to verify identity, not unnecessary identification documents. The normal response deadline is one month from receipt. If an extension of up to two further months is necessary because of complexity or the number of requests, we must explain it within the first month. Requests are normally free; lawful exceptions apply to manifestly unfounded or excessive requests.

You may complain directly to the Comissão Nacional de Proteção de Dados (CNPD). Contacting the clinic first can help resolve a concern, but is not a condition for contacting the authority.

[CNPD: your data protection rights](https://www.cnpd.pt/cidadaos/direitos/)

[Make a complaint to CNPD](https://www.cnpd.pt/cidadaos/participacoes/)

## 9. Security, automated decisions and changes

The site uses HTTPS for transport. No internet service can promise absolute security; do not send sensitive records through an initial enquiry. The area explorer and search filters do not diagnose you or make automated decisions about your eligibility for treatment. Suitability is assessed by a professional.

The update date identifies this version. We will revise the notice when website services or relevant processing change, and provide any additional information required before a new collection or purpose begins.

[General Data Protection Regulation](https://eur-lex.europa.eu/eli/reg/2016/679/oj)

[CNPD: your data protection rights](https://www.cnpd.pt/cidadaos/direitos/)

[Your data](https://liberdade108.com/en/your-data/)

[Cookies](https://liberdade108.com/en/cookies/)

[Terms and conditions](https://liberdade108.com/en/terms-and-conditions/)

https://liberdade108.com/en/privacy-policy/