Privacy Policy
Your privacy matters to us. This comprehensive policy explains how Leal Image Consulting protects and handles your personal data with complete transparency and care.
Who We Are
Leal Branding
We are a professional personal branding and image consulting service based in Portugal, dedicated to helping individuals and companies enhance their professional presence and personal brand.
Data Controller: Leal Image Consulting, Portugal
Privacy Contact: [email protected]
Whether you're in the UK (where UK GDPR applies) or outside the EEA/UK, we protect your data to the highest EU standards.
Last Updated: 22 September 2025
What This Policy Covers
This policy provides complete transparency about our data practices, explaining what personal data we collect, why we collect it, how we use and share it, retention periods, and your rights.
Website & Landing Pages
All interactions with our digital platforms and online presence
Client Services
Discovery calls, proposals, onboarding, and program delivery
Communications
Newsletters, events, and social media channels
The Data We Collect
Data You Provide Directly
Identity & Contact
- Name, email, phone
- Job title, company
- Country location
Project Information
- Goals and preferences
- Availability details
- Program selection
Branding & Image Inputs
We collect specific information to deliver personalized image consulting services:
- Colour preferences and style notes
- Body type and silhouette observations
- Wardrobe notes and preferences
- Headshot references and social profiles (e.g., LinkedIn)
- Photos or videos you choose to share for feedback
Automatic Data Collection
Website Data
When you visit our website, we automatically collect certain technical information to improve your experience:
- Device and browser information
- Pages visited and time spent
- Approximate location (via IP address)
- Cookies and similar technologies
Third-Party Data
Only when you provide or connect it:
- Scheduling tools and calendar data
- Meeting platform information
- Social media links
- Analytics platform data
We do not intentionally collect special categories of data (health, religion, etc.). If such information is incidentally revealed during sessions, we process it only with your explicit consent or as permitted by law.
How We Use Your Data
We process your personal data for specific purposes under clear legal bases as required by GDPR:
Where we rely on legitimate interests, we carefully balance them against your rights and expectations. You can object at any time.
Data Sharing & Security
When We Share Your Data
We share data only as necessary to deliver our services effectively:
Service Processors
Email suites, cloud storage, scheduling tools, analytics, payment providers, design platforms (Canva/Figma). All bound by Data Processing Agreements.
Professional Partners
Photographers, event teams - only with your knowledge and where relevant to your engagement.
Legal Requirements
Where required by law or to protect our rights and users' safety.
Important: We never sell your personal data to third parties.
Data Retention & International Transfers
How Long We Keep Data
We retain personal data only as long as necessary:
1
Active Clients
Duration of contract
2
Project Records
Up to 3 years after last activity
3
Billing Records
10 years (legal requirement)
4
Marketing Contacts
Until unsubscribe or list pruning
International Transfers
When transferring data outside the EEA/UK, we use appropriate safeguards:
- EU Standard Contractual Clauses
- UK IDTA/Addendum where applicable
- Assessment of provider practices
- Reputable cloud and tooling providers
Your Rights & Cookies
Your Data Protection Rights
Under EU/UK GDPR and similar regimes, you have comprehensive rights:
Access & Rectify
Request access to your data and correct any inaccuracies
Erase & Restrict
Request deletion or restriction of processing
Object & Portability
Object to processing and request data portability
To exercise your rights, email [email protected] We may verify your identity. You can also lodge complaints with your local authority (e.g., CNPD in Portugal).
Cookies & Similar Technologies
We use cookies responsibly:
- Necessary cookies: Essential for site operation
- Analytics cookies: With consent, to understand usage and improve content
Manage preferences via our cookie banner or browser settings. We respect "Do Not Track" signals where technically feasible.
Contact & Additional Information
Security & Children
We implement robust security measures including encryption in transit, access controls, least-privilege accounts, and regular updates. Our services target professionals - we don't knowingly collect data from children.
Corporate Programs
For group workshops or media training, we handle photos/recordings strictly for feedback and program delivery, obtaining appropriate consent and storing materials for the shortest practical time.
Marketing Communications
We send marketing emails only with consent or as permitted by law. Opt out anytime via email footer or by contacting us.
Get in Touch
Questions or requests about privacy?
Controller: Leal Branding, Portugal
California Residents: We don't "sell" personal information under CCPA/CPRA. You have rights to know, delete, correct, and limit disclosures. Contact us to exercise these rights.
We may update this policy to reflect changes in practices or laws. We'll post the new effective date and notify you where appropriate.