Last updated: August 2026
Jhennyfer Vitoria Pereira da Rocha Zelaquete, tax number 308605497, of Rua Claudino Chamiço n.º 20 R/C, 2460-650 Caldas da Rainha, Portugal, is the controller for personal data collected through academyuxflow.com.
Data protection contact: info@academyuxflow.com.
No data protection officer has been appointed, as the conditions in Article 37 of the General Data Protection Regulation are not met.
Identification and contact data: the name and email address given at checkout.
Billing data: billing address, country and, where applicable, tax number.
Transaction data: purchase reference, plan bought, amount, currency, date and payment status, plus the last four digits and brand of the card. We never receive or store full card numbers or security codes.
Usage data: IP address, device type, browser and pages visited, recorded by the hosting provider for security and stability.
Communication data: the content of emails you send us.
Processing the purchase, granting access and providing support. Basis: performance of a contract, Article 6(1)(b).
Issuing and keeping invoices and tax records. Basis: legal obligation, Article 6(1)(c).
Keeping the site secure and preventing fraud. Basis: legitimate interests, Article 6(1)(f).
Answering enquiries. Basis: pre-contractual steps or legitimate interests.
Marketing messages, if and when we send any. Basis: consent, Article 6(1)(a), withdrawable at any time.
Billing and transaction data: 10 years, as required by Portuguese tax law.
Account and access data: while access remains active and for 12 months afterwards.
Server logs: up to 12 months.
Support messages: up to 3 years after the last contact.
Data processed on the basis of consent: until consent is withdrawn.
Stripe Payments Europe, Ltd., based in Ireland, for payment processing, fraud prevention and receipts.
Vercel Inc., for site hosting and technical logs.
The email provider used to send purchase confirmations and access details.
Our accountant and the Portuguese tax authority, to meet legal obligations.
We never sell, rent or share personal data with third parties for marketing purposes.
Some providers may process data outside the European Economic Area, in particular in the United States. Those transfers rely on the European Commission's standard contractual clauses and, where applicable, on the adequacy decision for the EU-US Data Privacy Framework.
The site is served over an encrypted connection only. Payment takes place in a Stripe environment certified to PCI DSS Level 1, with strong customer authentication where required.
Access to data is limited to those who need it for the purposes described.
No decisions producing legal effects are taken solely by automated means, other than the automatic anti-fraud checks Stripe applies when authorising or declining a payment.
The courses are intended for people over 18. We do not knowingly collect data about minors, and delete it if identified.
You may request access, rectification, erasure, restriction, portability or object to processing, and withdraw consent, by writing to info@academyuxflow.com. We reply within one month.
We may ask for further information to verify your identity, solely to avoid disclosing data to the wrong person.
You may also lodge a complaint with your national supervisory authority, or with the Portuguese data protection authority at https://www.cnpd.pt.
This policy may be updated when the processing described changes. The date of the latest update is shown at the top of the page.
Back to home