PRIVACY POLICY AND PERSONAL DATA PROCESSING
Liminal Minds
A Liminal Minds® It establishes an unequivocal commitment to its clients, patients, and website visitors to guarantee the security, confidentiality, and protection of their personal data.
This Privacy Policy governs the processing of personal data carried out by the clinic in the context of the use of the website (https://www.liminalminds.pt), access to the User Area and the provision of our clinical services. This processing strictly complies with applicable legislation, namely Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation — GDPR) and Law No. 58/2019 of 8 August (National Data Protection Law).
Use of this website, as well as authentication in the User Area, implies full acceptance of this Privacy Policy.
1. Responsible for the Processing of Personal Data
The entity responsible for collecting and processing personal data is... Liminal Minds®, a trademark represented by the company name Liminal Minds, Lda., registered at the Commercial Registry under the unique registration and corporate tax identification number (NIPC) 516478176.
For any clarification, exercise of rights, or questions related to the privacy of your data, you may contact us through the following means:
Email: info@liminalminds.pt
Phone: (+351) 935 924 605
Postal Mail: Atlas IV Building, Av. José Gomes Ferreira 15, 3rd Floor J, 1495-139 Algés
2. Method of Collecting Personal Data
Personal data is collected by Liminal Minds® through the following channels:
-
- Contact and booking forms: Completed voluntarily by the user on the website to request information or schedule appointments.
- User Area (OTP Authentication): Collection of technical identification data and electronic credentials when requesting restricted access via One-Time Password (OTP).
- Digital Signature/Acceptance Mechanisms: Digital record of internal form submissions (such as the Appointment Cancellation Policy), where consent validation data is generated.
- Website navigation: Automatic data collection through cookies (see Section 10).
3. Categories of Personal Data Collected
A Liminal Minds® It collects and processes different categories of data, depending on the user interaction:
a) Identification and General Contact Information: Full name, email address, phone number, tax identification number (NIF), and address (for invoicing and correspondence purposes).
b) Health and Clinical Data (Special Data Categories): Information strictly necessary for the provision of mental health, psychological or psychiatric care, such as the reason for the consultation, a brief medical history and follow-up notes (collected under the professional confidentiality of our clinicians).
c) Digital Authentication and Validation Data (Logs): IP address, date and time of authentication via OTP, electronic record of submission and acceptance of digital declarations (e.g., timestamp of acceptance of the cancellation policy).
4. Purposes and Basis of Treatment
The data collected is intended for the following legitimate purposes:
-
- Provision of Healthcare Services and Clinical Suitability: Provision of consultations, therapeutic follow-up and management of the patient's clinical file. (Legal basis: Article 9, paragraph 2, point h) of the GDPR – provision of healthcare or treatment).
- Administrative, Commercial and Billing Management: Scheduling appointments, invoicing, processing payments, and fulfilling tax obligations. (Legal basis: Contract execution and compliance with legal obligations).
- Internal Policy and Security Management (User Area): User identity validation via OTP and digital archiving of the express acceptance of clinic policies (such as the Appointment Cancellation Policy), serving as legal proof of the established agreement. (Legal basis: Legitimate interest of the clinic and contractual performance).
- Informative Communications: If the user gives their explicit consent, information may be sent regarding the clinic's operation, mental health articles, or service updates. (Legal basis: Consent of the data subject).
5. Personal Data Security
Personal data will only be kept for the period necessary to fulfill the purposes for which it was collected.
-
- Clinical and Health Data: They will be filed and preserved in strict compliance with the legal deadlines applicable to the archiving of medical and historical documentation in force in Portugal.
- Authentication Data and Policy Logs: Retained for as long as the relationship between the patient and the clinic remains in effect, and/or during the legal limitation periods for contractual rights and obligations arising from acceptance of the policies.
- Billing Information: Stored for the legally required period of 10 years, as mandated by tax legislation.
- Communications / Marketing: Stored until the user withdraws their consent or exercises their right to be forgotten.
6. Personal Data Retention Period
A Liminal Minds® We are committed to processing only the data strictly necessary for each purpose and adopt rigorous technical and organizational security measures to protect your data against loss, destruction, unauthorized access, alteration or dissemination.
-
- Access to clinical data is restricted and confidential, protected by individual access keys and subject to the professional secrecy obligation of the clinical team.
- The OTP authentication mechanism ensures that only the registered email address holder can access their respective User Area and sign the requested declarations.
- Although data transmission over the internet is never 100% invulnerable, the clinic constantly updates and monitors its systems to mitigate any risk of intrusion.
7. Sharing and Transmission of Personal Data
Na Liminal Minds®Personal data is accessed exclusively by employees and healthcare professionals who need it to perform their therapeutic, administrative, or legal duties.
-
- Subcontractors: The data may be shared with technology service providers (e.g., clinical management software platforms, billing, or server hosting) acting on behalf of and under the strict instructions of [Company Name]. Liminal Minds®, being contractually bound by the same confidentiality and security obligations required by the GDPR.
- Legal Obligations: For the strict fulfillment of legal, judicial or tax obligations, the data may be shared with public entities or competent supervisory authorities.
- The clinic does not sell, rent, or share the personal data of its users with third parties for advertising or commercial purposes.
8. Data Subject Rights
Under the terms of the GDPR, the Liminal Minds® guarantees the user, as the data subject, the following rights, which may be exercised subject to the limitations arising from health legislation:
-
- Right of Access: Confirm whether your data is being processed and obtain a copy of it.
- Right of Rectification: Request the correction of inaccurate or outdated data.
- Right to be Forgotten (Erasure): Request the erasure of data, except when its retention is mandatory by law or for reasons of clinical health records.
- Right to Limitation of Processing: Temporarily suspend the processing of certain categories of data.
- Right of Objection: Object to the processing of data based on legitimate interest or for marketing purposes.
- Right to Portability: Request the transfer of your data to another entity in a structured and machine-readable format.
- Right to Withdraw Consent: Withdraw previously given consent at any time (without this affecting the lawfulness of the processing carried out up to that date).
To exercise any of these rights, the holder must send a written request to the email address: info@liminalminds.pt .
9. Complaint to the Competent Authority
If you believe that the processing of your data violates the GDPR or national legislation, you have the right to lodge a complaint directly with the competent supervisory authority:
-
- National Data Protection Commission (CNPD)
- Website: https://www.cnpd.pt
10. Cookies
The website of Liminal Minds® This site uses cookies (small text files stored in your browser) to optimize your browsing experience. The following types of cookies may be used:
-
- Session Cookies (Strictly Necessary): Temporary, essential to ensure the correct functioning of the site, page navigation, and maintaining the security of the User Area while logged in.
- Analytical Cookies: Used in aggregate and anonymous form to extract statistical data about website usage (e.g., most visited pages), allowing us to improve the platform's usability.
- Preferred/Functional Cookies: They allow the website to remember previous user choices (such as language or display settings).
11. Managing and Disabling Cookies
Users can configure their browser at any time to accept, refuse, or delete cookies. This configuration is usually done in the browser's "Options" or "Preferences" menus. Please note that disabling strictly necessary cookies may prevent proper access to certain areas of the website, including the OTP authentication mechanism in the User Area.
12. Privacy Policy Update
This Privacy Policy may be reviewed, modified, or updated at any time by [Company Name]. Liminal Minds®In order to reflect legislative changes or developments in the functionalities of our User Area, the most recent and updated version will be permanently available for consultation on our website.
Last update: May 2026
PRIVACY POLICY AND PERSONAL DATA PROCESSING
Liminal Minds
Liminal Minds® establishes an unequivocal commitment with its clients, patients, and website visitors to guarantee the security, confidentiality, and protection of their personal data.
This Privacy Policy regulates the processing of personal data carried out by the clinic within the scope of the use of the website (https://www.liminalminds.pt), access to the User Area, and the provision of our clinical services. This processing strictly complies with applicable legislation, namely Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation — GDPR) and Law No. 58/2019 of 8 August (national Data Protection Law).
By using this website, as well as authenticating in the User Area, you fully accept this Privacy Policy.
1. Data Controller
The entity responsible for the collection and processing of personal data is Liminal Minds®, a commercial trademark represented by the corporate name Liminal Minds, Lda., registered at the Commercial Registry Office under the single registration and corporate taxpayer number (NIPC) 516478176.
For any clarification, exercise of rights, or questions related to the privacy of your data, you may contact us through the following means:
Email: info@liminalminds.pt
phone: (+351) 935 924 605
Postal Mail: Atlas IV Building, Av. José Gomes Ferreira 15, 3rd Floor J, 1495-139 Algés, Portugal
2. Methods of Collecting Personal Data
Personal data is collected by Liminal Minds® through the following channels:
-
- Contact and Appointment Forms: Voluntarily filled out by the user on the website to request information or schedule consultations.
- User Area (OTP Authentication): Collection of technical identification data and electronic credentials when requesting restricted access via a One-Time Password (OTP).
- Digital Signature/Acceptance Mechanisms: Digital logging of internal form submissions (such as the Appointment Cancellation Policy), where consent validation data is generated.
- Website Browsing: Automatic collection of data through cookies (see Section 10).
3. Categories of Personal Data Collected
Liminal Minds® collects and processes different categories of data, depending on the user's interaction:
a) Identification and General Contact Data: Full name, email address, phone number, tax identification number (NIF), and address (for invoicing and correspondence purposes).
b) Health and Clinical Data (Special Categories of Data): Information strictly necessary for the provision of mental health, psychology, or psychiatry care, such as the reason for the consultation, a summary of clinical history, and follow-up notes (collected under the mantle of professional secrecy and clinical confidentiality).
c) Authentication and Digital Validation Data (Logs): IP address, date and time of OTP authentication, electronic log of the submission and acceptance of digital declarations (eg, timestamp of the cancellation policy acceptance).
4. Purposes and Legal Basis for Processing
The collected data is intended for the following legitimate purposes:
-
- Provision of Health Services and Clinical Suitability: Providing consultations, therapeutic follow-up, and managing the patient's clinical file. (Legal basis: Article 9(2)(h) of the GDPR – provision of health or social care or treatment).
- Administrative, Commercial, and Invoicing Management: Scheduling consultations, invoicing, processing payments, and complying with tax obligations. (Legal basis: Performance of a contract and compliance with legal obligations).
- Internal Policy and Security Management (User Area): Validating the user's identity via OTP and digitally archiving the express acceptance of clinical policies (such as the Appointment Cancellation Policy), serving as legal proof of the agreement established. (Legal basis: Legitimate interest of the clinic and performance of a contract).
- Informational Communications: Subject to the user's explicit consent, sending updates regarding the clinic's operations, mental health articles, or new services. (Legal basis: Consent of the data subject).
5. Security of Personal Data
Personal data will be stored only for the period necessary to fulfill the purposes that motivated its collection:
-
- Clinical and Health Data: Archived and stored in strict compliance with the legal timeframes applicable to the retention of medical and historical documentation in force in Portugal.
- Authentication and Policy Registration Data (Logs): Maintained for as long as the relationship between the patient and the clinic is active, and/or during the legal statute of limitations for rights and contractual obligations arising from the acceptance of the policies.
- Invoicing Data: Preserved for the legally mandated period of 10 years, as required by tax legislation.
- Communications / Marketing: Retained until the user withdraws their consent or exercises their right to be forgotten.
6. Personal Data Retention Period
Liminal Minds® undertakes to process only the data that is strictly necessary for each purpose and adopts strict technical and organizational security measures to protect your data against loss, destruction, unauthorized access, alteration, or disclosure.
-
- Access to clinical data is restricted and confidential, protected by individual access keys, and subject to the professional secrecy duties of the clinical team.
- The OTP authentication mechanism ensures that only the owner of the registered email address can access their respective User Area and sign the requested declarations.
- Although data transmission over the internet is never 100% invulnerable, the clinic constantly updates and monitors its systems to mitigate any risk of intrusion.
7. Sharing and Transmission of Personal Data
At Liminal Minds®, personal data is exclusively accessed by employees and health professionals who require it to perform their therapeutic, administrative, or legal duties.
-
- Subcontractors: Data may be shared with technological service providers (eg, clinical management software platforms, invoicing software, or server hosting providers) acting on behalf of and under the strict instructions of Liminal Minds®, who are contractually bound to the same duties of confidentiality and security required by the GDPR.
- Legal Obligations: For strict compliance with legal, judicial, or tax obligations, data may be shared with public entities or competent supervisory authorities.
- The clinic does not, under any circumstances, sell, rent, or share its users' personal data with third parties for advertising or commercial purposes.
8. Rights of the Data Subjects
Under the GDPR, Liminal Minds® guarantees the user, as the data subject, the following rights, which may be exercised in accordance with any limitations arising from health legislation:
-
- Right of Access: To confirm whether your data is being processed and to obtain a copy of it.
- Right to Rectification: To request the correction of inaccurate or outdated data.
- Right to Erasure (Right to be Forgotten): To obtain the deletion of data, except when its retention is required by law or for reasons concerning historical clinical records.
- Right to restrict processing: To temporarily suspend the processing of certain categories of data.
- Right to Object: To object to data processing based on legitimate interest or for marketing purposes.
- Right to Data Portability: To request the transfer of your data to another entity in a structured, commonly used, and machine-readable format.
- Right to Withdraw Consent: To withdraw previously granted consents at any time (without affecting the lawfulness of the processing carried out up to that date).
To exercise any of these rights, the data subject must send a written request to the email: info@liminalminds.pt .
9. Complaints to the Competent Authority
If you consider that the processing of your data violates the rules of the GDPR or national legislation, you have the right to file a complaint directly with the competent supervisory authority:
-
- National Data Protection Commission (CNPD)
- Website: https://www.cnpd.pt
10. Cookies
The Liminal Minds® website uses cookies (small text files stored in your browser) to optimize your browsing experience. The following types of cookies may be used:
-
- Session Cookies (Strictly Necessary): Temporary cookies essential to guarantee the correct functioning of the website, page navigation, and to maintain the security of the User Area while you are logged in.
- Analytical Cookies: Used in an aggregate and anonymous manner to extract statistical data about website usage (eg, most visited pages), allowing us to improve the platform's usability.
- Preference/Functional Cookies: These allow the website to remember previous choices made by the user (such as language or display settings).
11. Management and Deactivation of Cookies
The user can, at any time, configure their browser to accept, refuse, or delete cookies. This configuration is typically managed in the “Options” or “Preferences” menus of the browser. Please be advised that disabling strictly necessary cookies may prevent correct access to certain areas of the website, including the OTP authentication mechanism of the User Area.
12. Updates to the Privacy Policy
This Privacy Policy may be reviewed, modified, or updated at any time by Liminal Minds® to reflect legislative changes or developments in the features of our User Area. The most recent and updated version will be permanently available for consultation on our website.
Last updated: May 2026