Privacy policy

Last updated: 2 November 2026

Who is responsible for your data

Ora Bem Portuguese is run by Diogo Portugal, a self-employed European Portuguese tutor working from Portugal. Tax number (NIF): [NIF]. Address: [address]. Contact: writetodiogo.languages@gmail.com. Diogo Portugal is the controller of the personal data described here.

What data is collected and why

• Free guide and waitlists. Your email, your first name (optional for the guide), the guide or waitlist you chose and, for waitlists, your surname, level, the days, times, length and frequency that suit you, your time zone and, for the Tertúlia, the themes you voted for or suggested. Used to send you the guide, to suggest a time that suits the group, to tell you when a group starts and, for the Tertúlia, to choose the themes. Legal basis: your consent (GDPR art. 6(1)(a)).
• Weekly email. Only sent if you tick the box asking for it. Legal basis: your consent, which you can withdraw at any time with the unsubscribe link in every email.
• Lessons. Your name, email, booking times, anything you share about your goals, and lesson notes and homework. Used to give you the lessons. Legal basis: performance of a contract (art. 6(1)(b)).
• Purchases and bookings. Your name, email, billing country and purchase or booking details. Used to deliver the product or provide the lessons. Legal basis: performance of a contract (art. 6(1)(b)).
• Invoices and withdrawal requests. Your name, tax number if you give one, amounts paid and the details of your request. Used to meet legal and tax obligations. Legal basis: legal obligation (art. 6(1)(c)).
• Messages you send. Whatever you write. Used to reply to you. Legal basis: legitimate interest in answering you, or the contract if you are a student (art. 6(1)(f) or (b)).

Card or bank account details (for Direct Debit) are entered directly with the payment provider. Ora Bem Portuguese never sees or stores them.

Lessons are only recorded if you ask for it in advance.

Service providers

To run the website, the shop and the lessons, Ora Bem Portuguese uses these providers:

• Cloudflare: website hosting
• Brevo: emails and mailing list
• Stripe: payments for lessons, packs and plans
• Payhip and Stripe: payments and delivery of the PDF workbooks
• Cal.com: lesson bookings
• Google Meet (or, as an alternative, Jitsi Meet): video lessons
• Google (Gmail, Google Drive, Google Calendar and Google Sheets): email with students, lesson notes and bookings, and the group waitlist

Some of these providers are based outside the European Economic Area, for example in the United States. Where your data is transferred outside the EEA, the transfer relies on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework, for certified companies) or on standard contractual clauses. You can ask for a copy of these safeguards by email.

How long your data is kept

• Weekly email: until you unsubscribe.
• Waitlists and notifications (groups, Tertúlia, open session, new workbooks): until your group starts, the session takes place or the workbook is released; then deleted, unless you become a student.
• Lesson records: up to 2 years after your last lesson, unless you ask for them to be deleted earlier.
• Purchase and booking data: for as long as the contract lasts, then for the period that applies to invoices.
• Messages: up to 2 years.
• Invoices and accounting records: for the period required by Portuguese tax law (generally 10 years).

Your rights

You have the right to access your data, correct it, have it deleted, restrict or object to its use, receive it in a portable format, and withdraw your consent at any time (this does not affect anything done before you withdrew it). To use any of these rights, write to writetodiogo.languages@gmail.com. You will get an answer within one month.

You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt), or to the authority in the EU country where you live.

Cookies and browser storage

This website does not use cookies and does not store data in your browser's local storage.

The payment, booking and video services open their own pages, which have their own privacy policies.

Changes

If this policy changes, the date at the top of the page will be updated.