How I look after your information

Your trust matters to me, and that includes your data. Here, as simply as I can put it, is what reaches me through this website, why, and what you can ask me to do with it.

Who is responsible

I am: Gonçalo Moreira, an independent Focusing practitioner based in Coimbra, Portugal. For anything to do with your information, write to me at goncalo.moreira.phd@gmail.com.

What I receive, and why

• Messages. If you write to me through the contact form, I receive your name, email and message, only so I can reply. The form is handled by Netlify, the company that hosts this site. If you message me on WhatsApp, I receive your number and whatever you write; WhatsApp is run by Meta, under its own privacy policy.
• The newsletter. If you subscribe, I receive your email and, if you give it, your name, so I can send you the occasional letter. It’s handled by MailerLite, and every letter has a link to unsubscribe.
• Bookings and sessions. When you book, Cal.com receives your name, email, the time you choose and anything you write in the booking form, so that we can meet. Sessions take place online, by video call. If we work together, I keep a record of payments, as tax law requires.
• The basics of any website. To deliver these pages securely, Netlify processes technical data such as your IP address and browser type. The fonts on this site are loaded from Google Fonts, which also receives your IP address.

What I don’t do

I don’t use analytics, advertising or tracking cookies. I never sell your information, and I don’t share it with anyone beyond the services named on this page, which help me run things.

The legal side

Under the EU’s General Data Protection Regulation (GDPR), I rely on: what’s needed to reply to you, arrange sessions and work together (Article 6(1)(b)); your consent for the newsletter, which you can withdraw at any time (Article 6(1)(a)); my legal obligations for tax records (Article 6(1)(c)); and my legitimate interest in keeping this site running securely (Article 6(1)(f)).

Some of these services are based outside the EU, mainly in the United States. Where that’s the case, they rely on safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

How long I keep it

• Messages: for as long as they’re useful to our contact — and you can ask me to delete them at any time.
• Newsletter: until you unsubscribe.
• Bookings and payment records: for as long as our work needs them, and for as long as the law requires for tax and accounting.

Your rights

You can ask me at any time to show you the information I hold about you, to correct it, to delete it, to limit how I use it, or to send you a copy to take elsewhere. You can also object to how I use it, and withdraw your consent whenever you like. Just write to me — I’ll reply within one month at the latest.

Ready-made messages for each request are on the data access page.

If you feel I haven’t looked after your information well, you have the right to complain to the Portuguese data protection authority, the CNPD (cnpd.pt), or to the authority in the country where you live.

Last updated: October 2026