GLP-1 Trainer · Paulo Cabrita ← Back to site
Legal document

Privacy Policy

This policy explains how personal data collected on the website glp1trainer.pt is processed, in compliance with the General Data Protection Regulation (Regulation EU 2016/679 — GDPR) and Portuguese Law 58/2019 of 8 August.

Note. This is a translation provided for clarity. The Portuguese version is the legally binding one.

Last updated: 20 April 2026  ·  Version: 1.0

1. Who is the data controller

The controller of the personal data collected through this site is:

If you have any question about this policy or about how your data is processed, you can contact us at any time at the email above.

2. What data we collect

We only collect data strictly necessary for the stated purposes:

CategoryDataSource
IdentificationName and email addressWaitlist form
CommunicationsContent of messages you send us (email, WhatsApp)Direct contact
Technical dataIP address (anonymised), device type, browser, OS, pages visited, visit durationCookies and analytics tools
Marketing dataCampaign identifiers, ad interactions (Meta Pixel)Third-party cookies, with consent

We do not collect health data. This site does not ask for medical conditions, prescriptions, drug doses or clinical history. If you voluntarily share that information by email or WhatsApp, it will be handled with strict confidentiality and deleted as soon as it is no longer needed for the response.

3. Purposes and legal basis

Each piece of data is processed for a specific purpose, with a clear legal basis:

PurposeLegal basis (Art. 6 GDPR)Retention
Manage your waitlist subscription and send you news about the programme launchConsent — (a)Until consent is withdrawn or up to 24 months without interaction
Reply to contact requests by email or WhatsAppLegitimate interest (providing support) — (f)Up to 12 months after the last communication
Measure site performance and improve the experienceConsent (analytics cookies) — (a)Set in the cookie manager (typically 13 months)
Digital marketing and remarketing (Meta Pixel)Consent — (a)Set in the cookie manager (typically 180 days)
Comply with legal obligations (tax, accounting, where applicable)Legal obligation — (c)Applicable legal periods (up to 10 years for invoicing)

4. Who we share your data with

Your data is never sold. It is processed by service providers (sub-processors) that help us operate the site and communicate with you. They process data only on our behalf, under our instructions and under data processing agreements.

Sub-processorServiceServer location
Hostinger International, Ltd.Web hosting and emailEuropean Union
Formspree, Inc.Receiving contact and waitlist form submissionsUnited States (EU SCCs)
Meta Platforms Ireland Ltd.Meta Pixel — analytics and remarketing (with consent only)EU and US (SCC + EU-US Data Privacy Framework)
Google Ireland Ltd.Web font delivery via Google FontsEuropean Union

We may also share data with public authorities when legally required (e.g. tax authority, court order).

5. International data transfers

Whenever data is transferred outside the European Economic Area (EEA), we ensure that the transfer is protected by one of the mechanisms set out in Chapter V of the GDPR: an adequacy decision by the European Commission, Standard Contractual Clauses, or another valid mechanism.

6. Cookies and similar technologies

We use cookies and similar technologies to make the site work, measure performance and, with your consent, display relevant marketing content. Categories:

You can manage your preferences at any time via the cookie banner or your browser settings.

7. Data security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure:

8. Your rights

As the data subject, you have the following rights, which you can exercise at any time:

To exercise any of these rights, email us at trainer.glp1@gmail.com. We respond within 30 days.

If you believe the processing of your data violates the GDPR, you have the right to lodge a complaint with the Portuguese supervisory authority: Comissão Nacional de Proteção de Dados (CNPD)www.cnpd.pt. You may also contact the supervisory authority of your country of residence.

9. Minors

This site is intended for people aged 18 or over. We do not knowingly collect data from minors. If you become aware that a minor has provided data through our site, contact us so it can be deleted.

10. Changes to this policy

We may update this policy whenever there are relevant legal, technical or organisational changes. The current version is always the one published on this page, with the last update date shown at the top. Substantial changes will be communicated by email to waitlist subscribers.

11. Contact us