Privacy Policy

Last updated: May 2026  ·  OsteoStrong Lagos

OsteoStrong Lagos is committed to protecting the privacy of all users who visit our website and book a session through it. This Privacy Policy explains what data we collect, how we use it, and what your rights are under the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for your personal data is:

2. Data We Collect

When you book a free visit through our Calendly scheduling tool, or contact us via WhatsApp, the following personal data is collected:

• Full name
• Phone number
• Email address

This data is collected directly by Calendly and/or WhatsApp on their own platforms, under their respective privacy policies, and shared with us to confirm and manage your visit. We do not collect sensitive data (such as health data, financial data or biometric data) through the website.

3. Purpose and Legal Basis for Processing

Your data is processed exclusively for the following purposes:

• Free trial session booking — to contact you and confirm the date and time of your session (legal basis: performance of a contract / pre-contractual measures, Art. 6(1)(b) GDPR)
• Service-related communications — sending information about the OsteoStrong programme, if you have expressly consented (legal basis: consent, Art. 6(1)(a) GDPR)

Your data is not used for unsolicited marketing and is not shared with third parties for commercial purposes.

4. Data Sharing

Your personal data may be shared only with:

• Technical service providers — scheduling platforms (e.g. Calendly) and communication tools (e.g. WhatsApp Business), strictly necessary to process your request
• Google LLC — via Google Tag Manager and Google Analytics 4, for anonymous traffic analysis (only after cookie consent)

We do not sell, rent or transfer your personal data to third parties.

5. Data Retention

Your data is retained for the period strictly necessary for the purposes described:

• Data from unconverted leads: maximum 12 months after collection
• Active client data: for the duration of the contractual relationship and for the legally required period thereafter

6. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right of access — request a copy of the data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to object — object to the processing of your data for direct marketing
• Right to data portability — receive your data in a structured, machine-readable format
• Right to restriction of processing — request suspension of processing in certain circumstances

To exercise any of these rights, contact us by email at info@osteostronglagos.pt. We will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese supervisory authority: CNPD — Comissão Nacional de Proteção de Dados (cnpd.pt).

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. Our website uses HTTPS and form data is transmitted in encrypted form.

8. Cookies

We use cookies and similar technologies on our website. For detailed information on the cookies we use and how to manage them, please read our Cookie Policy.

9. Changes to This Policy

We may update this Privacy Policy periodically. The date of the last update is shown at the top of this page. We recommend checking this page regularly.

10. Contact

For any questions related to the processing of your personal data, please contact us: