Privacy Policy

Last updated: April 2026

1. Introduction

Nortada Leadership Lab, Lda. ("Nortada", "we", "us") is committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Portuguese data protection laws.

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website or use our services.

2. Data Controller

Nortada Leadership Lab, Lda.
Rua Brito Camacho, 169 - 2e Dir
2765-457 São João de Estoril
Cascais, Portugal
Phone: +351 91 245 45 11

3. Data We Collect

3.1 Data you provide to us

• Contact form submissions: name, email, company, role, programme interest, team size, preferred timing, and message content.
• Brochure download requests: name, email, and company name.
• Email correspondence: when you email us directly.

3.2 Data collected automatically

• Website usage data: IP address, browser type, device type, pages visited, time on site, and referring URL.
• Cookies: see Section 7 below.

4. Purpose and Legal Basis

We process your personal data for the following purposes:

• To respond to your enquiries (legal basis: legitimate interest)
• To deliver programme information you requested (legal basis: consent)
• To manage our customer relationship (legal basis: contract performance / legitimate interest)
• To improve our website and services (legal basis: legitimate interest)
• To comply with legal obligations (legal basis: legal obligation)

5. Data Sharing

We do not sell your personal data. We may share your data with:

• Service providers: CRM (Pipedrive), website hosting (OVH), email services — all bound by data processing agreements.
• Programme partners: SailCascais (our technical sailing partner), only when necessary for programme delivery and with your knowledge.
• Legal authorities: when required by law.

6. Data Retention

We retain your personal data for as long as necessary for the purposes described above, typically:

• Contact form data: 3 years from last interaction
• Client data: 7 years (legal/accounting obligations)
• Website analytics: 26 months

7. Cookies

Our website uses only essential cookies necessary for the website to function. We do not use advertising or tracking cookies. If we introduce analytics cookies in the future, we will update this policy and request your consent.

8. Your Rights

Under the GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing based on legitimate interest
• Withdraw consent at any time

To exercise any of these rights, please contact us at the address above or by phone.

9. International Transfers

Your data is processed within the European Economic Area (EEA). If any transfer outside the EEA is necessary, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

10. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption (SSL/TLS), access controls, and regular security reviews.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the updated date.

12. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD): www.cnpd.pt