privacy policy.

Last updated: 30.10.2025

  1. Scope of application

This Privacy Policy explains, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, General Data Protection Regulation ("GDPR") and Law no. 58/2019, of August 8, Data Protection Law ("LPD"), how wepeach collects and processes personal data on the Website www.we-peach.com, so please read this Privacy Policy carefully before providing us with your personal data through the Website.

This Privacy Policy may be amended, so before providing us with your personal data through the Website you should check the date of the last update to confirm the date on which it was last amended. Unless otherwise stated, changes to this Privacy Policy take effect on the date of the last update indicated at the top of this page.

2. Responsible for Treatment

Sole proprietor: Godinho & Marta Lda

Business Address: Rua da Piscina 17, 9 Frente 1495-151, Algés

TIN: 518359077

E-mail: geral@we-peach.com

3. Purposes 

Personal data is collected and processed for the following purposes:

  1. Website operation and statistical analysis

When you visit the website we automatically collect information about your devices through cookies that are necessary for the functioning of the website and third-party performance cookies, to obtain statistical browsing data, as established in the cookie settings available in the lower right corner of the website.

2. Information request management

When you contact us to request information or clarify doubts, we will collect your data (name, e-mail and/or telephone number, your requests/questions/doubts) in order to fulfill your request.

3. Newsletter subscription

By subscribing to the Newsletter we will use your e-mail address to send you information about wepeach, our services, training and news. You can unsubscribe from these marketing communications at any time in each email we send you or by sending us an email to geral@we-peach.com.

4. Sales

When you request the provision of wepeach services through the Website, your data will be collected and processed (name, e-mail address, telephone number and TIN number in the case of a natural person, or company name, registered office and TIN number, name of contact person, e-mail address and telephone number in the case of a legal person, and in both cases, history of services requested, correspondence and other information related to the services to be provided or provided) in order to be able to provide the services requested, invoice the respective prices and manage payment, as well as contact you, if necessary, and provide you with assistance, where applicable.

5. Complaints management

When you contact us to make a complaint about our services we will collect and process your data (name, address, e-mail, telephone, complaint) in order to process your complaint in accordance with the law.

6. Improving products and services

In order to be able to improve our services and with your agreement, we will collect your opinion and comments on the services you have purchased from us, namely through satisfaction surveys in order to satisfy our Customers more and better.

7. Event management and participation

If you wish to participate in events organized by wepeach we will collect the personal data required for each event in order to ensure your participation.

4. Legal foundations

The processing of personal data carried out by wepeach is based on various legal bases, depending on the purpose: 

  1. Execution of a contract or pre-contractual diligence at the request of the data subject (sale of services to customers, contracting of services to creators, requests for information);

  2. Consent of the data subject (subscription to newsletters when not yet a customer, participation in events, use of performance cookies for statistical analysis, service evaluations);

  3. Legitimate interest of wepeach to manage and improve its website, as well as to ensure that the use of the same is made in accordance with the respective General Terms and Conditions, sending marketing communications when you are already a customer and have not objected, as well as requesting your opinion and conducting satisfaction surveys;

  4. Compliance with legal obligations to which wepeach is subject, namely tax obligations.

When data processing is based on wepeach's legitimate interest, the necessary measures are taken to analyze the effects that the processing has on the interests of the data subjects. wepeach will not process your personal data if this analysis concludes that wepeach's interests are outweighed by your rights and freedoms

5. Mandatory or optional nature of providing personal data

When personal data is necessary for the conclusion or execution of a contract or for compliance with a legal obligation to which wepeach is subject, the provision of data is mandatory. When personal data is collected, those that are mandatory or optional will be indicated. The Client is free not to provide the personal data requested, but when it is mandatory and is not provided, this will mean that it will not be possible to access the service requested, be contracted to provide the service, obtain the information required or take part in events.

6. Who the data can be communicated to

The data is processed directly by wepeach and/or by subcontractors (information technology service providers, application and website access maintenance and management services, server hosting, as well as payment management and processing service providers, database updating, design of advertising campaigns, services and websites of wepeach), who will process the data for the purposes described above, on behalf of and in accordance with the instructions of wepeach, who are bound to wepeach by a written contract in accordance with applicable law and who are required to implement the necessary measures to ensure data security.  

Data may also be communicated to administrative authorities, regulatory bodies, courts or other third parties (lawyers, auditors, accountants) under the terms of the law and in order to comply with legal obligations applicable to wepeach or for the purposes of declaring, exercising or defending wepeach's legal rights. They may also be communicated to potential purchasers of wepeach (and their agents and advisors), with the potential purchaser being bound to comply with the provisions of this Privacy Policy. 

7. International data transfers

The processing of personal data for the purposes identified above will not, as a matter of principle, involve the transfer of your personal data to wepeach subcontractors outside the European Economic Area (EEA) where the level of protection of personal data is not considered to be identical to that practiced in the EEA. However, should this occur, wepeach will adopt the appropriate safeguards under the GDPR to ensure the same level of protection applied in the EEA.

  1. Data Preservation

The personal data provided will be kept for a maximum period of one year after the last contact or, in the case of the conclusion of contracts, ten years after the termination of the contract, without prejudice to their being kept to prove compliance with contractual, legal or other obligations, for as long as the limitation period of the corresponding rights has not elapsed.

2. Security measures

wepeach has implemented technical and organizational security measures necessary to guarantee the security of the personal data provided to it, including protection against unauthorized or unlawful processing and/or access, accidental loss, destruction or damage, taking into account the current state of technology, the nature of the data processed and the risks to which they are exposed. Notwithstanding these measures, when personal data is collected over an open network (internet) there is always a risk that it may be seen and used by unauthorized third parties. 

3. Personal data protection rights

As the data subject, you have the right to:

  • obtain access to the personal data stored concerning them;

  • request the correction of incorrect, inaccurate or incomplete personal data;

  • request the erasure of personal data that is no longer necessary or if its processing is unlawful;

  • object to the processing of your personal data for marketing purposes or for reasons relating to your specific situation;

  • request the restriction of the processing of your personal data in specific cases;

  • receive your personal data in a machine-readable format and send it to another data controller ("data portability");

  • revoke consent at any time, without compromising the lawfulness of the processing carried out on the basis of the consent previously given;

  • designate a person to exercise their rights after their death (failing which, their heirs) or determine the impossibility of exercising them in relation to special categories of personal data or when they relate to privacy, image or communications data.

You can find out more about what each of these rights entails and what restrictions apply at https://www.cnpd.pt/bin/direitos/direitos.htm.

Requests to exercise the above rights can be made by email to geral@we-peach.com. If you send a request regarding your data, please specify the nature of your request and the type of processing it concerns. We may also request further information to verify your identity.

You can also lodge a complaint with the National Data Protection Commission (www.cnpd.pt) if:

  1. We do not reply to you within the legal time limit and provided that you have submitted your request by the means made available by wepeach for this purpose;

  2. We do not comply with your request or we unjustifiably refuse to comply with your request;

  3. You believe that your rights have not been properly guaranteed, in particular regarding the right to restriction of processing and the right to object to processing.