Privacy Policy
This Privacy Policy explains how personal data is collected, used, and protected by Dalia Mateus, operating under the name RivaJazz (“we”, “us”, “our”), through the website www.rivajazz.com.
We are committed to protecting your privacy and handling your personal data in a transparent and responsible way, in accordance with the General Data Protection Regulation (GDPR) applicable in both the European Union and the United Kingdom.
Who We Are
- Data Controller: Dalia Mateus
- Business name: RivaJazz
- Contact: info@rivajazz.com
- Location: Portugal
- Services offered internationally (online & in-person)
Personal Data We Collect
We may collect and process personal data when you:
- visit our website
- contact us by email, phone, or messaging platforms
- book a session or service
- subscribe to newsletters or updates
- complete intake, consent, or health-related forms
This may include:
- name and contact details
- booking and payment records
- health or lifestyle information you voluntarily provide
- communication history
How We Collect Data
Website & Cookies
We use cookies to ensure the website functions properly and to improve user experience. Basic analytics may be collected to understand site usage.
Analytics
We use Google Analytics to analyse general website traffic. This data does not personally identify you.
Mailing Lists
If you choose to subscribe to updates or newsletters, we collect your name and email address. Communications are sent via third-party platforms such as Mailchimp. You may unsubscribe at any time using the link provided in each email.
Online Booking
Bookings and payments may be processed through third-party booking platforms (e.g. Fresha), which operate under their own privacy policies.
Intake & Consent Forms
For certain services, we collect relevant health and lifestyle information to support safe and appropriate care. This information is treated as confidential and used solely for service delivery.
How We Use Your Data
Your data is used only when necessary to:
- provide and manage services
- process bookings and payments
- communicate regarding appointments
- meet legal or regulatory obligations
- improve service quality
We do not sell or share your data for marketing purposes.
Legal Basis for Processing
We process personal data under the following lawful bases:
- Consent (where you have given permission)
- Contractual necessity (to provide booked services)
- Legitimate interests (to operate and improve services responsibly)
- Legal obligations (e.g. accounting or tax requirements)
Data Retention
Personal data is retained only for as long as necessary to fulfil its purpose, comply with legal obligations, or until you request deletion, subject to legal requirements.
Your Rights
Under GDPR, you have the right to:
- access your personal data
- request correction or deletion
- restrict or object to processing
- withdraw consent at any time
- request data portability
To exercise your rights, please contact: info@rivajazz.com
Data Security
We take appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse.
Complaints & Supervisory Authorities
If you have concerns about how your data is handled, you may contact us directly.
You also have the right to lodge a complaint with:
- Portugal: Comissão Nacional de Proteção de Dados (CNPD)
- United Kingdom: Information Commissioner’s Office (ICO)
Changes to This Policy
This Privacy Policy may be updated from time to time. The latest version will always be published on this page.
Last updated: February 2026
Contact
For any privacy-related questions, please contact:
📧 info@rivajazz.com
