Privacy Policy

Last updated: July 2026 ·

Who we are

This website is operated by Elisabete Barros ("we", "us"). It sells digital wellness products — the Core & Glute Sculpt program and the Whole Food Guide — and offers 1:1 Wellness Lifestyle Design guidance. Contact: hello@elisabetebarros.com .

What we collect and why

Purchase data. When you buy, payment is processed by Stripe. We receive your name, email address and purchase details so we can deliver your download and provide support. We never see or store your full card details — those are handled by Stripe under their own privacy policy.

Newsletter. If you subscribe, we store your email address with our email provider to send you the newsletter. Every email includes an unsubscribe link.

Wellness Lifestyle Design intake. If you work with us 1:1, you complete an intake form covering your habits, goals and some health information (such as diagnosed conditions, medication and pregnancy). This is used only to build and adjust your plan and to check whether 1:1 guidance is suitable for you. Health information is a special category of data under the GDPR, so we collect it only with your explicit consent, given on the form. It is never sold, never used for marketing, and never shared beyond the processors listed below.

Analytics. We use privacy-friendly, cookie-free analytics that collect aggregate statistics only (page views, referrers, country). No personal profiles are created and no data is sold.

Legal basis

We process purchase data to perform our contract with you, newsletter data based on your consent, intake health information based on your explicit consent (which you may withdraw at any time), and analytics based on our legitimate interest in understanding how the site is used.

How long we keep data

Purchase records are kept as long as required for tax and accounting law. Newsletter data is kept until you unsubscribe. Intake information is kept while we work together and deleted within 12 months after it ends, or sooner on request.

Your rights

Under the GDPR you may request access to, correction of, or deletion of your personal data, object to processing, and lodge a complaint with your supervisory authority (in Portugal, the CNPD). To exercise any right, email us.

Third parties

We share data only with the processors needed to run this site: Stripe (payments), our email provider (newsletter), and our hosting provider, Netlify (which also receives intake form submissions). Each processes data under their own GDPR-compliant terms.

Changes

We may update this policy; the latest version always lives on this page.