Privacy
Your data, explained clearly
Information about data processed through floraflow.pt. Updated: 26 October 2026.
Flora Flow is a project led by Ana Santana, being developed in Colares, Sintra, with an opening planned for 2027. Ana Santana is the controller of personal data collected through this website. For privacy matters, write to contact@floraflow.pt.
When you contact us
You can contact us directly at contact@floraflow.pt. Requests submitted through the form are emailed to the project promoter through Cloudflare. Acceptance by the sending service does not guarantee arrival in the inbox.
We use your name, email address, message and any other details you share with us, such as a phone number or area of interest, to review and answer your request. Where you ask about entering into a future contract, the legal basis is taking steps at your request before a contract. For other enquiries, it is our legitimate interest in answering people who contact the project.
Contacting us does not add you to the waiting list or authorise promotional messages. Share only the details needed for your enquiry; please avoid health information, identity documents or other sensitive data.
Email waiting list
Joining is optional and requires an express choice, separate from a contact request. We store your email address, language, signup date and consent record to send news about the opening and Flora Flow programme. Your consent is the legal basis for this processing.
We send an automatic email acknowledging receipt of the signup request. This message does not verify that the person completing the form owns the email address. To monitor this email, we store the date and outcome of the attempt and, when available, the date it was accepted by the sending service and the message identifier. These records help us detect failures and avoid duplicates; acceptance by the service does not guarantee arrival in the inbox.
You can withdraw consent and leave the list at any time by writing to contact@floraflow.pt. This does not affect processing carried out before you withdrew consent. Joining the list is not a booking or a commitment to buy.
Statistics and external content
Optional measurement helps us understand which pages and buttons are useful. When you accept it in your privacy preferences, our counters group events by day, page, button and language. These counters do not include your name, email address, message, visitor identifiers or page address parameters. You can change your choice in the privacy preferences in the footer.
Cloudflare also provides the website infrastructure and traffic and performance statistics. Hosting and security services may process technical connection data, including IP addresses, to deliver the website and prevent abuse. This technical data is separate from our conversion counters.
Embedded maps and videos load only when you activate them. Doing so shares connection data with the relevant provider, such as Google Maps or YouTube, which may use its own technologies under its privacy policy. Following a link to WhatsApp, social media or another website also takes you to a service with its own rules.
Who receives the data
Requests are received by the project promoter and anyone helping her respond, only as needed. We use Cloudflare for hosting, protection against automated submissions with Turnstile, waiting list storage and automatic delivery of contact requests and signup acknowledgements. Cloudflare processes the data needed to handle these messages. The waiting list database is configured in the European Union region. Email is received through mailbox.pt and forwarded to mailboxes used by the promoter, including Gmail. We do not sell your data or give the waiting list to our partners for their own purposes.
Some illustrations load directly through Higgsfield’s image delivery network, which uses Amazon CloudFront. To display these images, your browser makes requests to that provider, which receives technical connection data such as your IP address and browser information. We do not add visitor identifiers or form data to these requests.
Some of these providers operate internationally, and processing may involve countries outside the European Economic Area. The waiting list database location does not cover every service used by the website. You can request information about providers, processing locations and applicable safeguards through our privacy contact. See also Cloudflare’s privacy information.
How long we keep data
A daily cleanup deletes waiting list entries older than 365 days together with their email delivery records, and aggregate counters older than 365 days. You can ask us to remove your signup and its email delivery records before then. If we need to keep in touch beyond that period, we will ask you to sign up again.
We review email enquiries within 12 months of the last interaction and manually delete details that are no longer needed. If a request leads to a contractual relationship or a legal retention requirement applies, the necessary data follows the relevant retention period, which will be explained in that context.
Your rights
You may request access, correction, erasure, restriction of processing and portability of your data where provided for by law. You may object to processing based on legitimate interests and withdraw consent for the waiting list. We do not make decisions with legal or similarly significant effects based solely on automated processing.
Send your request to contact@floraflow.pt, giving the email address used for your enquiry or signup. We may ask only for information needed to verify your identity. We normally respond within one month; if a lawful extension is needed, we will explain why within that period.
You may also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).
Changes to this policy
We update this page when the data collected, purposes or services change. The date at the top identifies the current version. Any new purpose requiring consent will be presented separately.