Jardim da Alma
Privacy Policy
Last updated: 6 October 2026
This is a translation for your convenience. The reference text is the original in Portuguese.
This house takes care of people. Taking care of your data is part of the same respect.
1. Who handles your data
Michelle Senna Bonfim, sole trader, trading under the name “Jardim da Alma”
Tax number (NIF): 321 844 149
Address: Rua Capitão Lebre, n.º 12, 3.º Esq. · 3810-384 Aveiro · Portugal
Email: [email protected]
Phone: +351 934 167 507
She is the controller of the personal data collected through the website jardimdalma.com.
2. What data we collect and why
We only ask for what we need, and we only use it for what we said we would.
| When | What data | What for | Legal basis |
|---|---|---|---|
| Ordering flower essences | Name, email, phone (optional), delivery address, note (optional) and the contents of the order | To prepare, confirm and deliver the order, and to talk to you about it | Performance of a contract — Art. 6(1)(b) GDPR |
| “Let me know when available” | To let you know when what you asked for becomes available | Consent — Art. 6(1)(a) GDPR | |
| Contact by WhatsApp or email | The data you send us in your message | To reply to you and, where relevant, book a session | Pre-contractual steps and legitimate interest — Art. 6(1)(b) and (f) GDPR |
| Tax obligations | Invoicing data | To issue and keep invoices | Legal obligation — Art. 6(1)(c) GDPR |
The website does not collect health data through forms. What you share in an in-person or online session is covered by professional confidentiality and does not go through this website.
Filling in the “note” field when ordering is optional. You do not need to describe complaints, symptoms or health conditions to order a flower essence.
3. Testimonials published on the website
Testimonials in the Stories from the Garden section are only published with the permission of the person who wrote them, and appear only with the text and name that person agreed to show. No testimonial reveals the content of a session.
That permission can be withdrawn at any time, without giving a reason: simply email [email protected] and the testimonial will be removed from the website.
4. How long we keep it
- Order data: 3 years after the last order, unless tax law requires longer in the case of invoices (10 years).
- Notification list: until you withdraw your consent, until the notification is no longer relevant, or 2 years at most.
- Contact messages: as long as needed to deal with the matter.
- Testimonials: for as long as the permission stands.
5. Who we share it with
We do not sell, rent or trade your data. We only share it with those who are essential for the website to work and for your order to arrive:
- Cloudflare, Inc. — website hosting and order storage.
- Google (Gmail) — receiving the emails with requests.
- Google Fonts — the website’s typefaces are loaded from Google’s servers, which receive the IP address of whoever visits the page.
- Delivery service — CTT Expresso or another carrier, which receives the name, address and contact details needed to deliver the order.
Some of these providers are based outside the European Economic Area. In those cases, the transfer takes place under the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.
6. Cookies
This website does not use advertising or analytics cookies. There is no Google Analytics, no social media pixels and no behavioural profiling.
We only store one technical preference in your browser (localStorage): whether you chose to have the music on or off. It stays on your device, is not sent anywhere and disappears if you clear your browser data.
7. Your rights
Regarding your data, the law gives you the right to:
- know what data we hold and ask for a copy (access);
- correct anything that is wrong (rectification);
- ask for it to be deleted (erasure);
- ask for it to be kept but not used (restriction);
- receive your data in a format you can take with you (portability);
- object to processing based on legitimate interest;
- withdraw your consent at any time, without affecting what was done before.
To exercise any of these rights, simply write to [email protected]. We reply within one month at most.
If you feel your data is not being handled properly, you can lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).
8. Security
The website is always served over an encrypted connection (HTTPS). Orders are stored on Cloudflare infrastructure with restricted access, and email notifications go to a personal mailbox protected by a password and two-step verification.
No system is infallible. If there is ever a data breach that poses a risk to you, you will be informed, as the law requires.
9. Minors
Orders are intended for people aged 18 and over. We do not knowingly collect children’s data through this website.
10. Changes to this policy
If this policy changes, the date at the top changes with it. Previous versions are not kept available, so if you would like a copy, save it when you read it.
← Back to Jardim da Alma