Privacy Policy

Nutriworkspace LDA (Rua 18 de Abril 65, 4420-103 GDM, Portugal) is the controller for personal data processed in this website and application. Contact: support@nutriworkspace.com.

We process account identity data (name, email), professional workspace data, booking form inputs (name, email, notes), and appointment metadata. For connected Google Calendar features, we process only data required to operate appointment scheduling on your behalf, including: Google Calendar event identifiers and metadata needed to create/update/delete events, availability/busy time windows for scheduling conflict checks, OAuth access and refresh tokens, and granted scope information.

Service delivery, bookings, and account administration are processed under GDPR Article 6(1)(b), performance of a contract. Security monitoring, fraud prevention, and legal compliance rely on GDPR Articles 6(1)(c) and 6(1)(f). Optional preference storage (theme, language, layout) relies on GDPR Article 6(1)(a), consent. Google Calendar integration requested by the user is processed under GDPR Article 6(1)(b).

Essential security cookies and storage are always active for authentication and secure session management. Optional preference storage is only enabled if you accept it through the cookie banner or settings. See our Cookie Policy for details.

We use contracted infrastructure and communication providers (including hosting, database, and email delivery processors) to provide the service. For Google Calendar features, Google acts as an external platform based on your explicit connection. We do not sell Google user data. We do not transfer or disclose Google user data to third parties except as required to provide the user-requested feature, for security operations, or to comply with applicable law.

We keep personal data while your account is active and as needed to meet legal, accounting, dispute-resolution, and security obligations. Data no longer required is deleted or anonymized using operational retention routines. Google OAuth tokens are stored encrypted and are removed when you disconnect Google Calendar from your account. Calendar events created in your Google Calendar remain under your Google account controls unless you delete them there.

Subject to applicable law, you can request access, rectification, erasure, restriction, portability, and objection to processing. You can also withdraw consent for optional preference storage at any time in cookie settings.

Where data is processed outside the EEA, we rely on recognized safeguards such as adequacy decisions or standard contractual clauses when required.

If you grant Google Calendar access, NutriWorkspace uses Google user data only to provide and improve calendar-related features that you explicitly enable (for example: create/update/delete appointment events and check availability for booking conflict prevention). NutriWorkspace does not use Google user data for advertising and does not use it to train general AI or machine learning models. NutriWorkspace handling of Google user data is limited to these disclosed purposes and follows the Google API Services User Data Policy, including the Limited Use requirements.

You may contact support first so we can resolve the issue quickly. You also have the right to lodge a complaint with your local supervisory authority in the EU/EEA.