Privacy Policy

Last updated: 4 November 2026

Your trust matters to me. This policy explains what personal data I collect through this website and my work, why I collect it, how I protect it and what rights you have. It is written in line with the EU General Data Protection Regulation (GDPR) and Portuguese data protection law.

1. Who is responsible for your data

Miguel Sevilhano, holistic therapist and osteopath, based in Sesimbra, Portugal, is the data controller for this website (miguelvisionquest.com) and for the sessions, retreats and trainings offered here.

Contact for any privacy question: miguelsevilhano@gmail.com or +351 966 075 513.

2. What data I collect

  • Contact and booking forms: your name, email, phone or WhatsApp number, country and the message you write to me.

  • Newsletter: your email address and, if you give it, your name.

  • Training applications: the information you share about yourself, your experience and your motivation, plus a health questionnaire.

  • Retreat and event registrations: contact details, emergency contact, dietary needs and relevant health information, so I can hold you safely.

  • Sessions: notes about your wellbeing and process that I may keep to support your care.

  • Payments: billing details and the record of your payment. Card details are handled by the payment provider and are never seen or stored by me.

  • Member accounts: if you join an online course, your login details and course progress.

  • Messages: what you send me by email, WhatsApp or social media.

  • Website use: technical data such as your IP address, browser, device and pages visited, collected through cookies (see section 9).

3. Why I use your data and on what legal basis

  • To answer you, book and deliver sessions, retreats and trainings: to take steps before a contract and to perform it (GDPR art. 6(1)(b)).

  • To send you my newsletter: your consent (art. 6(1)(a)). You can unsubscribe at any time with the link in every email.

  • To process health information: your explicit consent (art. 9(2)(a)), and where relevant, the provision of health care under professional confidentiality (art. 9(2)(h)).

  • To keep invoices and accounting records: legal obligation (art. 6(1)(c)).

  • To keep the website secure and understand how it is used: my legitimate interest (art. 6(1)(f)), and your consent for non-essential cookies.

4. Your health information

Health information is sensitive and I treat it with special care. I only ask for what I need to keep you safe and to adapt the work to you. It is kept confidential, is only accessible to me (and, for retreats, to co-facilitators who need it for your safety), and is never used for marketing. You can withdraw your consent at any time, although this may mean I cannot safely offer some practices.

5. Who I share your data with

I never sell your data. I only share it with trusted providers that help me run my work, and only as much as needed:

  • Squarespace: website hosting, forms, newsletter, member areas and online payments.

  • Mailchimp (Intuit): newsletter delivery.

  • Payment providers used through Squarespace (such as Stripe or PayPal), and my bank for transfers.

  • Google reCAPTCHA: protecting forms against spam.

  • WhatsApp (Meta): if you choose to contact me there.

  • Co-facilitators and venues of retreats you register for, limited to what they need to host you.

  • My accountant, for invoicing and tax obligations.

  • Public authorities, only when required by law.

6. Transfers outside the EU

Some providers (such as Squarespace, Mailchimp, Google and Meta) may process data in the United States. These transfers are protected by the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

7. How long I keep your data

  • Newsletter: until you unsubscribe.

  • Enquiries that do not lead to a booking: up to 2 years.

  • Session, retreat and training records, including health information: for as long as we work together and up to 5 years after our last contact, unless you ask me to delete them sooner.

  • Training applications that are not accepted: up to 12 months.

  • Invoices and accounting records: 10 years, as required by Portuguese law.

8. Your rights

You have the right to access your data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw your consent at any time. To use any of these rights, write to miguelsevilhano@gmail.com. I will reply within one month.

If you feel your data has not been handled properly, you can also file a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

9. Cookies

This website uses cookies set by Squarespace. Essential cookies make the site work (for example, the cart, forms and member login). Analytics and functional cookies help me understand how the site is used and are only set if you accept them in the cookie banner. You can change your choice at any time through "Cookie Preferences" at the bottom of the page or in your browser settings.

10. Age

My sessions, retreats and trainings are for adults. I do not knowingly collect data from anyone under 18.

11. Security

I use secure, reputable platforms, keep access to your data limited to what is needed, and protect my devices and accounts with strong passwords and two-factor authentication where available.

12. Changes to this policy

I may update this policy from time to time. The date at the top always shows the latest version.

With care,
Miguel Sevilhano