Privacy Policy

1. Data controller

The data controller is Potencial Journey Excellence, Sociedade Unipessoal Lda, trading as Neves Academy.

Address: Rua de Fundão 119, 4535-200 Mozelos, Portugal · Tax number (NIF): 519581911 · Email: info@nevesacademy.com.

2. Data we collect

When you complete the interest form, we may collect:

• name, email and phone number;
• relationship to the athlete, age range, experience and locality;
• training mode, pack, goal, intended start, days and time;
• selected language and confirmation that you read this policy;
• limited technical data needed for security and duplicate-request controls, including pseudonymised identifiers and server records.

Name, email, phone number, locality and the requested options are needed for us to answer. Without the required fields, we cannot process the request through the form.

We do not ask for special categories of data. Please do not submit health information or other sensitive data through the form.

3. Purposes and legal bases

We use the data to answer your request, explain training options, confirm availability and take steps requested before a possible enrolment. This purpose relies on the need to take steps at your request prior to entering into a contract under Article 6(1)(b) GDPR.

The automatic email containing the requested information is sent to the address provided to fulfil that request. Any future newsletter or promotional communication will be handled separately and sent with prior consent where required.

We use security controls and request rate limits based on our legitimate interest in protecting the service and preventing abuse under Article 6(1)(f) GDPR.

4. Children

When a request concerns a child, it should be submitted by a parent or legal guardian. We may ask for reasonable confirmation of that responsibility before proceeding. We do not use age to make solely automated decisions.

5. Recipients and transfers

Data may be accessed by authorised staff and technical providers needed for hosting, security and email delivery, subject to instructions and confidentiality duties. The email delivery service may process the notification content and the address provided to send the requested reply.

We do not sell personal data. We do not plan transfers outside the European Economic Area; if a provider makes such a transfer, the safeguards required by Chapter V GDPR will apply and this policy will be updated.

6. Retention

We keep request data only for as long as needed to answer and follow up on the opportunity, and for no longer than 12 months after the last contact, unless a legal obligation or the defence of rights requires longer retention. Technical security records are kept only for as long as needed for security and operation.

If you later join a communications list, your preference and consent record will be kept while the subscription is active and, after withdrawal, for the period needed to demonstrate your choice and prevent unwanted messages.

7. Your rights

You may request access, rectification, erasure, restriction, objection and, where applicable, portability of your data. Where processing relies on consent, you may withdraw it at any time without affecting previous processing. Email requests to info@nevesacademy.com; we will generally respond within one month.

You may also lodge a complaint with the Portuguese Data Protection Authority (CNPD).

8. Automated decisions and security

We do not carry out profiling or solely automated decisions with legal or similarly significant effects. We apply appropriate technical and organisational measures, including secure connections, request validation and access controls.

9. Changes

We may update this policy when purposes, providers or retention periods change. The date and version at the top identify the applicable information.