Myofascia Lisbon

Privacy Notice

Last updated 15 June 2026

This notice explains what personal information I collect when you become a client of Myofascia Lisbon, why I collect it, how I keep it safe, how long I keep it, and the rights you have over it.

Who is responsible for your data

Sophie Wyles, who runs Myofascia Lisbon as a sole practitioner, is the data controller responsible for your personal information. You can contact me at any time about your data at info@myofascialisbon.pt, or by post at Rua Presidente Arriaga 134, 3, 1200-774 Lisbon, Portugal.

What I collect

Your identity and contact details (name, email, phone, age).
Health and medical information you provide, including your medical history, current symptoms, the areas and nature of your pain, and your treatment notes over time.
Your intake form responses and your signature consenting to treatment.
Practical preferences, such as whether you are happy to receive a voicemail or message.

Health information is a special category of personal data and is treated with extra care.

Why I use it, and my legal basis

To provide your treatment safely and effectively, and to manage our appointments and administration. I rely on the provision of health care as my basis for handling your health information, together with your consent given on the intake form.
To contact you about your care, where you have agreed to it.
Optional research and improvement (only if you tick that box), explained below, on the basis of your explicit, separate consent.

Who can see it

Your information is kept confidential and is not shared with anyone else without your explicit written consent, except where I am required to by law. A small number of people who work with me may access your information where it is needed to provide your care or to build and maintain the tools and systems I use to run the practice (for example, technical support, and any staff or assistants). They are bound by the same duty of confidentiality and only access what is necessary. I also use trusted service providers who store and process data securely on my behalf: Supabase (secure database hosting), Vercel (website and application hosting), and Resend (email delivery). These providers act only on my instructions under data-processing agreements.

Where your data is stored

Your records are held within the European Union (in Ireland), with access restricted to me and the few people who help me run the practice and maintain its technology, all under a duty of confidentiality. Some technical processing, such as running the application and sending emails, takes place on servers in the United States; where that happens, appropriate safeguards (Standard Contractual Clauses) are in place to protect your information to the standard required by law.

Optional: helping others living with pain

On the intake form you can choose, entirely optionally, to let me keep an anonymised version of your pain and treatment data to learn from, to improve care, and to contribute to research and tools that could help others. If you opt in, this anonymised data may be shared with trusted research or healthcare partners.

Anonymised means it no longer contains your name or anything that could identify you. Because it can no longer be linked back to you, it may be kept indefinitely. This is completely separate from your treatment, it never affects the care you receive, and you can withdraw your consent at any time, which stops any future use (data already anonymised cannot always be traced back to remove it).

How long I keep it

Your identifiable records (anything that identifies you, such as your name, contact details and full history) are kept for up to 10 years after your last treatment, then securely deleted.
If you are under 18, your records are kept until your 25th birthday, in line with guidance on retaining young people's health records.
Anonymised data, if you opted in above, is kept indefinitely, as it no longer identifies you.

Your rights

You have the right to ask me to: see a copy of your data, correct it, delete it, restrict or object to how it is used, receive a copy in a portable format, and withdraw any consent you have given. To exercise any of these, just email info@myofascialisbon.pt and I will respond promptly.

Complaints

If you are unhappy with how your data has been handled, you can contact me first, and you also have the right to complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at cnpd.pt.

Changes to this notice

I may update this notice from time to time. The date at the top shows when it was last changed.

Myofascia Lisbon · myofascialisbon.pt · info@myofascialisbon.pt