Privacy Policy

Last updated: 2026-11-05

1. Who we are

Lenzie is a service (a web application for managing clients and jobs) provided by Hugo Grilo, Sintra, Portugal. For any question about personal data: [email protected].

2. What data we collect

Invite request and subscription: name, email, profession or business, message and language, as provided by the person.

Account: name, email, business name, password (stored encrypted, never in plain text) and billing and payment details for the plan.

Data entered in the application (clients, requests, quotes, contracts, notes, files): see section 4.

Website statistics: pages visited, referrer, language and device type, without cookies and without storing the IP address (we only use an anonymous identifier that changes every day).

Technical emails sent by Lenzie (confirmations, invitations, password recovery) are logged with the date and result of sending.

3. Purposes and legal bases

Replying to an invite request and creating the account: pre-contractual steps and performance of the contract.

Sending Lenzie news: only with consent, confirmed by email; it can be withdrawn at any time using the link in every message.

Security, abuse prevention and website usage statistics: legitimate interest.

Complying with legal obligations, including tax and accounting: legal obligation.

4. Data about the user’s clients

The personal data of clients that the user records in Lenzie is the user’s responsibility: the user is the controller and Lenzie acts as processor, processing it only to provide the service and on the user’s instructions.

Anyone practising in health or therapy records health data, a special category, in sessions and reports. They should record only what is necessary, inform their clients, obtain consent or another suitable legal basis and follow the ethical rules of their profession.

We do not use the user’s clients’ data for other purposes, sell it or share it with third parties, except providers that help us run the service (section 6).

5. Cookies and local storage

The public website uses no advertising or tracking cookies. Statistics are anonymous and cookie-free.

The application uses a strictly necessary session cookie to keep you signed in and stores preferences such as language, selected view and theme in your browser. These are essential to operation and do not require consent.

If the browser sends the Do Not Track signal, the visit is not counted at all.

6. Sharing

We use providers that process data on our behalf: hosting of the website and database, email delivery and payment processing (for example the Revolut payment link). They receive only what is necessary and must protect the data.

We do not sell personal data. We may disclose data if required by law or a competent authority.

7. Retention

Invite requests and subscriptions: until cancelled or no longer needed. Visit statistics: up to 13 months. Account and application data: while the account exists and, once closed, for the period needed to meet legal obligations, then deleted. Data can be exported at any time.

8. Rights

Everyone has the right of access, rectification, erasure, restriction, objection and portability of their data, and to withdraw consent where processing is based on it. Write to [email protected]. You may also complain to the Portuguese data protection authority (CNPD, www.cnpd.pt) or to the authority in your country.

9. Security

We use encrypted connections (https), encrypted passwords, limits on login attempts and backups. No system is completely secure; in case of a data breach affecting someone, we will inform them and the competent authority as required by law.

10. Changes

This policy may be updated. The date of the last update appears at the top and, for relevant changes, we notify application users.