Skip to main contentSkip to accessibility controls

Privacy Policy

Last updated: April 2026. This policy explains how NOVODI collects, uses, and protects personal data when you interact with our website.

1. Data controller

The data controller for this website is Raquel Reis, operating under the brand NOVODI, based in Portugal.

Contact for data protection matters: info@novodi.org

2. What personal data we collect and why

We collect only the information you actively provide to us. The table below sets out each processing activity, the data collected, its purpose, and the lawful basis under the General Data Protection Regulation (GDPR).

Contact enquiries (contact form)

  • name, email address, optional 'I am' category, optional subject, message.
  • to read and respond to your message.
  • Article 6(1)(f) — legitimate interests (responding to enquiries you have initiated).

Accessibility communication support (optional checkbox in contact form)

  • a disclosure that you may have accessibility or communication needs.
  • This is health-related information and qualifies as special category data under GDPR Article 9.
  • solely to ensure our reply is delivered in an inclusive and accessible way.
  • Article 9(2)(a) — your explicit consent, given by ticking the optional checkbox.
  • You are never required to provide this information. You may omit it without affecting our ability to respond.

Partnership enquiries (Get Involved form)

  • organisation name, organisation type, contact email address, description of collaboration need.
  • to evaluate and respond to the partnership enquiry.
  • Article 6(1)(f) — legitimate interests.

Newsletter subscription (footer signup)

  • email address.
  • to send NOVODI updates, news, and announcements.
  • We collect your email address only when you actively provide it and give your explicit consent by ticking the subscription checkbox on our signup forms. Legal basis: Article 6(1)(a) RGPD (consent).
  • You may withdraw consent and unsubscribe at any time using the unsubscribe link in any email we send, or by writing to info@novodi.org.

Inclusive Centre interest list and Testing programme waitlist

  • email address.
  • to notify you when the Inclusive Centre service or testing opportunities become available.
  • Article 6(1)(a) — consent. You gave consent by ticking the subscription checkbox on our signup forms.
  • You may withdraw consent at any time by writing to info@novodi.org.

3. Our data processors

We use Brevo (Sendinblue S.A.S., 7 rue de Madrid, 75008 Paris, France) to deliver transactional emails and to store contact and subscription lists. Brevo processes your data on our behalf under a Data Processing Agreement compliant with GDPR Article 28. Brevo is an EU-headquartered company; all data is stored within the European Economic Area. For details, see Brevo's privacy policy at brevo.com/en/legal/privacypolicy/.

Enquiry and message data is also received and stored in the NOVODI email inbox hosted by our email provider. We do not operate any other third-party analytics, advertising, or tracking services on this website.

4. How long we keep your data

  • Contact and partnership enquiries: retained for up to 24 months from the date of last correspondence, then permanently deleted from our inbox.
  • Newsletter, Inclusive Centre, and Testing waitlist subscribers: retained until you unsubscribe or request deletion, whichever is earlier.
  • You may request deletion of any personal data we hold at any time by emailing info@novodi.org. We will confirm deletion within one month.

5. International data transfers

We do not transfer your personal data outside the European Economic Area. Brevo stores and processes all data within the EEA.

6. Your rights under the GDPR

As a data subject you have the following rights, exercisable free of charge by contacting info@novodi.org:

  • Right of access — to receive a copy of the personal data we hold about you (Article 15).
  • Right to rectification — to have inaccurate data corrected (Article 16).
  • Right to erasure ('right to be forgotten') — to have your data deleted, subject to any overriding legal obligation (Article 17).
  • Right to restriction of processing — to limit how we use your data in certain circumstances (Article 18).
  • Right to data portability — to receive your data in a machine-readable format (Article 20).
  • Right to object — to object to processing based on legitimate interests (Article 21).
  • Right to withdraw consent — for any consent-based processing, you may withdraw at any time without affecting the lawfulness of prior processing (Article 7(3)).
  • Rights related to automated decision-making — we do not carry out automated profiling or decision-making.

We will respond to all requests within one calendar month. If your request is complex or numerous, we may extend this by a further two months with notice.

7. Cookies and local storage

We use only strictly necessary browser local storage to remember your language preference, as well as the settings of the accessibility widget. No cookies are used for tracking or advertising. Please see our Cookie Policy for full details.

8. Right to lodge a complaint

If you believe we have not handled your personal data in accordance with the GDPR, you have the right to lodge a complaint with the Portuguese supervisory authority:

  • Comissão Nacional de Proteção de Dados (CNPD)
  • Rua de São Bento, 148-3.º, 1200-821 Lisboa, Portugal
  • geral@cnpd.pt — www.cnpd.pt

We would, however, appreciate the opportunity to address your concern directly before you contact the CNPD.

9. Changes to this policy

We may update this policy to reflect changes in our practices or applicable law. The current version is always available at novodi.org/privacy. Where changes are material, we will take reasonable steps to notify affected individuals.

This site uses localStorage to remember your language preference. No tracking cookies are used. See our Cookie Policy