Privacy notice
Last updated: 26 October 2026
Who is responsible for your data
Natacha Latouf is responsible for your personal data on this website. She works as an independent professional in Portugal, under her own name. To ask anything about your data, write to hello@natachalatouf.com.
What this notice covers
This notice covers natachalatouf.com: the contact form, the booking calendar, emails you send to hello@natachalatouf.com, and the sessions you book through the site. It does not describe how Natacha keeps client records once you become a client. That is explained in the information you receive when you start working together.
What data we collect, why, and the legal basis
Natacha collects only what she needs to answer you, book your session and take payment. You do not have to give your data, but without your contact details she cannot reply.
| Where | What we collect | Why | Legal basis (GDPR) |
|---|---|---|---|
| Contact form | Name, email address, your child’s age, your message, the time you gave consent | To read and answer your enquiry | Your consent (article 6(1)(a)) |
| Emails to hello@natachalatouf.com | Your email address and what you write | To answer you | Your request to be contacted; our legitimate interest in replying (article 6(1)(f)) |
| Booking calendar (Cal.com) | Name, email address, any notes you add, the time you choose | To book and confirm your session | Steps you ask for before a contract; the contract itself (article 6(1)(b)) |
| Payments (MB WAY, Stripe, Revolut Pay, bank transfer) | Payment details handled by the provider, the amount and the date | To take payment and issue invoices | The contract (article 6(1)(b)); accounting and tax law (article 6(1)(c)) |
| Online sessions (Google Meet) | Your name, email address and call details | To hold the session | The contract (article 6(1)(b)) |
| Visiting the site and using the security check | IP address and technical request details, processed by Cloudflare | To deliver the site, keep it secure and block automated abuse | Our legitimate interest in security (article 6(1)(f)) |
Sensitive details. Please keep your message short and do not include sensitive information about your child or family, such as health details. If you choose to include it, you are giving your explicit consent for Natacha to use it to answer your enquiry (article 9(2)(a)). Natacha is happy to talk it through on a call instead.
Cookies and similar technologies
This site sets no cookies of its own and stores nothing in your browser by itself. It uses no analytics, advertising or tracking. Two services can store small items when you use them:
- Security check on the contact form. When you start using the form, Cloudflare’s Turnstile checks that you are a person and not an automated bot. It can store a small item in your browser. Natacha uses it only to protect the form.
- Booking calendar. The calendar is provided by Cal.com and loads only after you choose to show it. Once it loads, Cal.com and its providers can set a short-lived security cookie, store an identifier in your browser, and receive your IP address, including for performance monitoring.
You can clear these items at any time in your browser settings. If you would rather not load the calendar, you can ask for a time by writing to hello@natachalatouf.com.
Who receives your data
Natacha does not sell your data and does not use it for advertising. These providers handle it so the site and her practice can work:
| Provider | What for | What it receives |
|---|---|---|
| Cloudflare | Hosting the site, the domain, the form’s security check, and forwarding emails sent to hello@natachalatouf.com | Your IP address, the security-check token, and emails passing through forwarding |
| Resend | Sending your contact-form message to Natacha as an email | Your name, email address, child’s age and message |
| Google (Gmail) | The mailbox where Natacha receives enquiries and replies to them | Your emails |
| Google (Meet) | Online sessions | Your name, email address and call details |
| Cal.com | The booking calendar | Your booking details and, once the calendar loads, your IP address |
| MB WAY, Stripe, Revolut Pay and your bank | Taking payment | Your payment details and the amount |
Each provider also has its own privacy policy. Natacha may share data when the law requires it.
Transfers outside the EEA
Some of these providers are based outside the European Economic Area, including in the United States, or may process data there. When that happens, the transfer relies on a safeguard that GDPR requires, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework. For more detail, write to hello@natachalatouf.com.
How long we keep your data
Enquiries that do not lead to a booking are deleted six months after Natacha’s last reply. The other categories are kept as follows:
| Data | How long |
|---|---|
| Contact-form messages and emails that lead to no booking | Six months after Natacha’s last reply |
| Bookings and payment records | As long as needed to deliver your session, and as accounting and tax law requires |
| Technical and delivery logs held by Cloudflare and Resend | The short periods set by those providers |
| Client records | As described in the information you receive when you become a client |
If you ask Natacha to delete your data sooner, she will, unless the law requires her to keep it.
Your rights and how to complain
You can write to hello@natachalatouf.com at any time to ask Natacha to:
- show you the data she holds about you
- correct data that is wrong
- delete your data
- limit how she uses it
- give you a copy you can move elsewhere
- stop using it, if she relies on legitimate interest
If you gave your consent, you can withdraw it at any time. Withdrawing does not affect what happened before. Natacha will reply within one month.
If you are unhappy with how your data is handled, you can complain to Portugal’s data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at cnpd.pt (opens in a new tab).
Children and changes to this notice
This website is for parents and carers, not for children. The contact form asks for your child’s age only so Natacha can understand your enquiry. She does not collect information from children through the site.
This notice was last updated on 26 October 2026. If it changes, the date changes with it.