Privacy policy

Last updated: 7 October 2026

Who is responsible

Andrea Cepeda, an independent professional registered in Portugal and trading as Calm Kids Sleep, is responsible for the information covered by this notice.

Address: Rua Cabeço do Mestre, 6, 1 Dto. L, 8100-231 Loule, Portugal.

Contact: hello@calmkidssleep.com.

This notice covers the public website, resource requests, newsletters and adult booking, payment and service correspondence.

What we use and why

Questions and bookings. Your contact details, any name you provide, language, message and appointment details help Andrea answer you and arrange support. The legal basis is taking steps you request before a contract or providing the service you buy. Other correspondence is handled under our legitimate interest in managing communications.

Payments. Billing details, the service ordered and transaction status are used to manage your purchase and meet accounting duties, based on the contract and applicable legal obligations. Stripe processes card payments; the website does not collect your full card details.

Requested guides. Your email, selected guide and language are used to send the requested resource. A delivery record includes the request time, guide, language, notice version, delivery status and a protected request identifier. Our legitimate interest is fulfilling your request and preventing duplicate sends. Requesting a guide does not subscribe you to marketing.

Newsletter. A separate opt-in allows us to use your email, language, subscription status and consent evidence to send the newsletter. The basis is your consent. Unsubscribe through each newsletter or contact Andrea. Marketing is optional and is not a condition of buying support or requesting a guide.

Security and analytics. IP address, browser information and technical request data help deliver and protect the website, based on our legitimate interest in preventing abuse. Optional Google Analytics uses browser identifiers and page-view information only after consent. Change that choice through Privacy preferences in the footer. See the Cookie policy.

You can object to processing based on legitimate interests. If information needed to fulfil your request is not provided, Andrea may be unable to answer or provide the service.

Your child's information

Website forms are for adult parents or legal guardians. Do not submit medical reports or detailed health or sensitive family information through the general contact form.

The existing post-booking Google Forms questionnaire and agreed WhatsApp support are separate from these forms. Before sharing sensitive information, ask Andrea about the information needed, access and privacy arrangements for private child intake. This website notice does not replace the information needed for that separate process.

Services we use

Cloudflare provides hosting, storage, security checks and operational emails. Cloudflare privacy notice.

Cal.com handles appointments and Cal Video calls. Cal.com privacy notice.

Stripe processes payments. Stripe privacy notice.

Google provides Workspace/Gmail business email, Google Calendar, the existing Google Forms questionnaires and optional Google Analytics. Google privacy notice.

Brevo handles newsletter confirmation and delivery. Brevo privacy notice.

WhatsApp is used for agreed messaging support. WhatsApp EEA privacy notice.

Providers receive information needed for their role and may also process information under their own notices. Necessary records may be shared with advisers or authorities for legal obligations or claims. We do not sell your personal information.

International processing

Some providers process information outside the European Economic Area, including in the United States. Published transfer arrangements include adequacy decisions for participating EU-US Data Privacy Framework organisations and Standard Contractual Clauses, depending on the provider and service. See Google's transfer information, Cloudflare's data-processing terms and the provider notices above. Contact Andrea for information or copies of safeguards relevant to your data.

How long information is kept

Closed inquiries that do not become client relationships have a retention limit of 90 days after the last meaningful contact. Unconfirmed newsletter requests have a limit of 30 days.

Active newsletter records are kept while you remain subscribed. After withdrawal, only the minimum consent evidence and suppression record needed to respect your choice and address related legal obligations or claims are retained.

Resource delivery and security records are kept only as needed to fulfil requests, resolve delivery problems, prevent duplicate sends and investigate abuse. Service correspondence is kept while needed to provide support and resolve related follow-up or disputes. Billing records are kept for the applicable accounting period. Longer retention is limited to records needed for a specific legal duty or claim.

Website privacy preferences expire after 180 days unless you clear them earlier. Google Analytics user/event retention is configured for two months; aggregated reports have Google's separate reporting retention. This notice does not promise automated deletion or immediate removal from every provider's backup. Contact Andrea about a particular record.

Your rights

You can request access, correction, deletion or restriction, and, where applicable, a portable copy of your information. You can object to processing and to direct marketing. Withdrawing consent does not affect processing that was lawful before withdrawal.

Send requests to hello@calmkidssleep.com. Andrea may need proportionate information to verify your identity or authority to act for a child. Requests are normally answered within one month; any lawful extension will be explained within that first month.

You can complain to Portugal's Comissão Nacional de Proteção de Dados or another competent supervisory authority without contacting Andrea first.

We update this notice when processing changes and show the revision date above.