Privacy notice
Temporary website operation — 7 October 2026
This website is hosted by Infomaniak. Its enquiry form asks for your name, email address and a short message; telephone is optional. All four fields and the selected language are sent as a plain-text email to info@chronicpainreliefretreat.com through our existing cyon mailbox using authenticated, encrypted SMTP. The visitor’s email address is used as the reply-to address. Our team uses the email to respond to the enquiry and arrange the next step. No automatic reply is sent.
Please send only a short enquiry. Do not submit diagnoses, medical records or detailed health information. If further information is needed later, agree an appropriate way to provide it with the team first. Sending this enquiry does not confirm a booking.
The enquiry endpoint does not save form contents in files, a database or application logs. The sent email is processed and retained in the mail service for handling the enquiry; this is not a promise of immediate deletion from mailboxes or provider backups. The retention criteria and contact for privacy requests below remain relevant. Hosting and mail providers may process technical access, security and delivery metadata. For abuse prevention the endpoint keeps a random key and rate-limit timestamps associated with hashed IP identifiers, without form contents. Entries expire after one hour and are removed on the next request. No advertising or analytics cookies are introduced by the form.
The former application backend, application database and administrator area remain inactive. The descriptions below of the earlier application fields, consent controls, cyon database, automated notifications and administrator cookies concern the previous system, not this enquiry form. They do not confirm the present status, security or deletion of previously submitted data. For questions about an earlier application, contact the controller below.
Controller and contact
Portomeda LDA, NIF 518 490 971, Attn. Daniel Lundby Hilde, R. da Previdência 50, 8500-311 Portimão, Portugal, is responsible for processing application data. For privacy requests, including withdrawal of consent, contact info@chronicpainreliefretreat.com.
Data and purposes
We collect your name, email, telephone number, country of residence and preferred contact method to respond to your application and arrange a consultation. We also collect the pain description and duration, previous treatments, movement restrictions, optional medical notes and personal goals that you provide, to review suitability and prepare individual support. Application records include a reference, submission and consent times, review status and status history, consultation notes and, where applicable, a payment deadline. Provide only information relevant to your application and avoid unnecessary details about other people.
Legal grounds
Contact and ordinary application processing are necessary to take steps at your request before a possible contract (GDPR Article 6(1)(b)). Health information is processed with your explicit consent (Articles 6(1)(a) and 9(2)(a)). Where legally required, accounting and related records are retained to comply with legal obligations (Article 6(1)(c)). Necessary technical security processing is based on our legitimate interest in operating and protecting the website (Article 6(1)(f)). Processing necessary for legal claims requires the applicable legal basis and, for health information, the relevant Article 9 condition. Your application consent does not authorise marketing or publication of your name, health details or testimonial.
Choice and withdrawal
Applying is voluntary. Fields marked with an asterisk are required by the application form; medical notes are optional. We need relevant information and your explicit consent to complete the health-related suitability review. You can ask questions before providing health details. You may withdraw consent at any time by emailing the privacy contact. This does not affect earlier lawful processing, but may prevent further suitability assessment or personalised support. Withdrawal of consent is not itself a cancellation fee or waiver of a refund; booking and statutory rights are dealt with separately.
Access, hosting and communications
Access to application content for retreat purposes is limited to Hazem and the responsible organising team. Applications are stored in a MySQL database hosted through cyon, with a password-protected administration area. The automated notification email contains the applicant’s name and reference, not the submitted health details. Hosting and email services necessarily process data to provide their services, subject to applicable data-protection requirements. cyon hosts its infrastructure in Switzerland, which benefits from an EU adequacy decision. Other international transfers or access must meet the applicable GDPR requirements. Selecting WhatsApp as a contact preference permits contact about your enquiry; it does not authorise sharing your health records through that channel. Do not send sensitive health documents through ordinary email or WhatsApp without first agreeing an appropriate way to provide them.
Retention criteria
Application data is retained while necessary to review the application, conduct the consultation and manage any resulting participation. For rejected or withdrawn applications, health details are no longer needed once the review and any related follow-up are closed, unless a specific lawful reason requires limited retention. Wait-list information is needed only while the wait list remains relevant. For participants, health details and consultation notes are retained only while necessary for the agreed support and related follow-up. Accounting records, consent evidence and information needed for legal claims may require different retention periods; health details must not be kept merely because an invoice is retained. Backups and technical logs are subject to their operational retention cycles, with access limited to the relevant purpose. Contact us for the retention criteria applicable to your record or to request erasure. Erasure requests remain subject to lawful retention exceptions.
Your rights
Under the applicable conditions, you may request access, rectification, erasure, restriction and portability, object to processing based on legitimate interests, and withdraw consent. Contact info@chronicpainreliefretreat.com. We may need reasonable information to verify your identity. We normally respond within one month and will explain any permitted extension. You may complain to the Portuguese Comissão Nacional de Proteção de Dados (CNPD), or the competent supervisory authority in your country. Suitability and acceptance decisions are made by people, not solely automated decisions.
Cookies and technical access data
The public website uses a language parameter in the URL. It does not use advertising or analytics tracking cookies. The protected administrator area uses a session cookie for authentication. Hosting infrastructure records technical access and security data, such as IP addresses, request times and requested pages, for operation and security. Third-party websites reached through external links apply their own notices. Any future optional tracking requires an updated notice and any legally required consent before it operates.