Privacy
Privacy policy
Last updated: 24 October 2026
This policy explains what personal data is collected when you use fernandojardim.com (the “Site”), why, and what rights you have over it. It describes the Site as it works today; it will be updated before anything described here changes.
1. Who is responsible for your data
The controller of your personal data is Fernando Nahat Jardim, Lisbon, Portugal. Email: hello@fernandojardim.com.
If you have any question about this policy or about your data, write to that address. You will get an answer within 30 days.
2. What data is collected
When you write to me. If you use the contact form or email me, I receive your name, your email address, your organisation if you give it, and whatever you write. When you send the contact form, these details, plus the page you sent it from and the site language, reach me by email and are saved as a contact in my contact database (Brevo), so I can follow up. If the form cannot send, it offers to open your own email app instead.
If you subscribe to the newsletter. Your email address, your first name if you give it, the page you signed up on and the date. The newsletter provider (Kit) emails you a confirmation link, and you are only subscribed after you click it. A copy of your email address and sign-up details is kept in Brevo so I have one contact list; Brevo is not used to send you the newsletter.
When you visit the Site. The company that hosts the Site, Cloudflare, processes technical data needed to deliver the pages and protect the Site from abuse: your IP address, browser and device type, and the page you asked for.
Spam check on forms. When you use a form, Cloudflare Turnstile checks that you are a person and not a bot. It reads technical signals from your browser (such as your IP address and browser details) only for that check. It does not show ads or follow you across sites.
The Site does not use analytics, advertising or tracking cookies today. If analytics are added, they will only run after you agree in a cookie banner, and this policy will be updated first.
Please do not send special categories of data (health, political opinions, religion and similar) in a message.
3. Why your data is used, and on what legal basis
| What it is used for | Legal basis (GDPR Art. 6) |
|---|---|
| Replying to your message or enquiry | Steps taken at your request before entering a contract (Art. 6(1)(b)), or legitimate interest in answering you (Art. 6(1)(f)) |
| Sending the newsletter you signed up for | Your consent (Art. 6(1)(a)) |
| Keeping the Site secure and working | Legitimate interest (Art. 6(1)(f)) |
| Meeting legal, tax and accounting duties | Legal obligation (Art. 6(1)(c)) |
Your data is never sold, rented or traded.
4. Who else sees your data
Only the providers that make the Site and email work, and only as far as they need to:
- Cloudflare — hosting, security and the Turnstile spam check on forms
- Brevo (Sendinblue SAS, France) — contact database, and the service that delivers contact-form messages to me
- Kit (ConvertKit LLC, United States) — newsletter sign-up, confirmation and sending
- Google — email (messages you send me are stored in my mailbox)
Each acts as a processor under a written agreement. Some may process data outside the European Economic Area; those transfers rely on the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework. Data may also be disclosed where the law requires it.
5. How long data is kept
| Data | Retention |
|---|---|
| Messages and related correspondence | 3 years after the last contact |
| Newsletter subscriber data | Until you unsubscribe, then removed within 30 days (a suppression record is kept so you are not added again) |
| Invoices and accounting records | 10 years, as Portuguese law requires |
6. Your rights
Under the GDPR you have the right to:
- Access — get a copy of the personal data held about you
- Rectification — correct data that is wrong or incomplete
- Erasure — ask for your data to be deleted
- Restriction — ask for processing to be paused while a question is resolved
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interest
- Withdraw consent — at any time, without affecting what was done before
To use any of these rights, email hello@fernandojardim.com. Every newsletter will also carry a one-click unsubscribe link.
If you believe your data has been mishandled, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at cnpd.pt.
7. Security
Reasonable technical and organisational measures protect your data, including encryption in transit (HTTPS) and access controls on the accounts that hold it. No system is perfectly secure, but any breach that affects your rights will be reported to the CNPD and, where required, to you.
8. Children
The Site is for professionals and is not aimed at children under 16. No data is knowingly collected from them. If you believe a child has sent data through the Site, write to the address above and it will be deleted.
9. Other websites
The Site links to other websites, such as LinkedIn, news outlets and event pages. This policy does not cover them; read their own privacy policies.
10. Changes to this policy
This policy will be updated when the Site or the tools behind it change. The date at the top always shows the current version.